diff --git a/mysql/acl_restrictions.sql b/mysql/acl_restrictions.sql
new file mode 100644
index 0000000..574e5c7
--- /dev/null
+++ b/mysql/acl_restrictions.sql
@@ -0,0 +1,3 @@
+SHOW GRANTS FOR 'role';
+REVOKE ALL ON *.* FROM 'role'@'%';
+GRANT ALL ON ex_database.* TO 'role'@'%' WITH GRANT OPTION;