Create a MySQL or MariaDB account and grant it privileges in the same step, then narrow an ALL PRIVILEGES account down to a subset — scope by scope, with the raw SHOW GRANTS output kept in view.
Quick searches