Error While Configuring Data-Out Replication on Azure MySQL Flexible Server (Error 1227 on Replica) to Digital Ocean MySQL

Question

Error While Configuring Data-Out Replication on Azure MySQL Flexible Server (Error 1227 on Replica) to Digital Ocean MySQL

Henry Le 0

Dear Everyone,

I am reaching out for assistance with configuring Data-out replication from an Azure Database for MySQL – Flexible Server instance to an external DigitalOcean Managed MySQL replica.

We are following the Microsoft documentation for outbound replication setup: 📄 Configure Data-Out Replication – Azure MySQL Flexible Server

⚠️ Issue Summary

The replication setup fails at the step:

Configure the replica server to start Data-out replication

We attempted the following command on the DigitalOcean replica server:


CHANGE REPLICATION SOURCE TO   
  SOURCE_HOST='test.mysql.database.azure.com',   
  SOURCE_USER='replica_user',   
  SOURCE_PASSWORD='***',   
  SOURCE_LOG_FILE='mysql-bin.000001',   
  SOURCE_LOG_POS=899;

However, this results in the following MySQL error:


Error Code: 1227. Access denied; you need (at least one of) the SUPER or REPLICATION_SLAVE_ADMIN privilege(s) for this operation

We believe this indicates that the replica server requires elevated privileges on the Azure source, which are currently not available due to platform restrictions.

🔧 Configuration Details

MySQL Version: 8.0

Tier: General Purpose (D2ads_v5)

Specs: 2 vCores, 8 GiB RAM, 40 GiB storage, 420 IOPS

✅ Objective

Our goal is to enable cross-cloud MySQL replication, with the Azure server acting as the source, and a DigitalOcean Managed MySQL server acting as the replica.

🙏 Request for Support

We would appreciate your guidance on the following points:

Does Azure MySQL Flexible Server support outbound replication to third-party external replicas (e.g., DigitalOcean)?

If so, how can we grant the required REPLICATION_SLAVE_ADMIN or SUPER privileges to the replication user to support the CHANGE REPLICATION SOURCE TO (or legacy CHANGE MASTER TO) command on the replica server?

If this use case is not supported, are there any recommended alternatives to replicate data from Azure MySQL to an external service?

We aim to implement a near real-time or low-latency replication stream from Azure to DigitalOcean and would prefer binary log replication if feasible.

Please let us know if any additional information or logs are needed to assist with the investigation.

Thank you very much for your time and support

Mallaiah Sangi 1,145 Reputation points Microsoft External Staff Moderator

2025-04-17T16:45:59.1066667+00:00
Hi Henry Le

Greeting!

Yes, Azure MySQL Flexible Server supports outbound replication to third-party external replicas. This feature, known as Data-Out Replication.

To set this up, you'll need to configure the source server (Azure MySQL Flexible Server) and ensure proper networking and permissions for the external replica serve.

You can grant the required REPLICATION_SLAVE_ADMIN or SUPER privileges to the replication user.

CHANGE THE REPLICATION SOURCE TO SOURCE_HOST='<master_host>', SOURCE_USER='<master_user>', SOURCE_PASSWORD='<master_password>', SOURCE_LOG_FILE='<master_log_file>', SOURCE_LOG_POS=<master_log_pos>

master_host: hostname of the source server (example – 'source.mysql.database.Azure.com')

master_user: username for the source server (example - 'syncuser'@'%')

master_password: password for the source server

master_log_file: binary log file name from running show master status

master_log_pos: binary log position from running show master status

Please refer the Microsoft official documentation for details on data-out Replication.

https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-data-out-replication?tabs=command-line

I hope this information helps. Please do let us know if you have any further queries.
Henry Le 0 Reputation points

2025-04-18T01:50:28.81+00:00

Dear Mallaiah Sangi,

I really appreciate for your quickly respond.

I have faced an issues with "You can grant the required REPLICATION_SLAVE_ADMIN or SUPER privileges to the replication user". I have using the default account of Azure MySQL Flexible server (masterlogin) which is limited by using the SUPER privileges is limited.(https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-limitations)

Beside that I have granted the REPLICATION SLAVE privileges for the replica_user, but it's still appear an issues Error Code: 1227. Access denied; you need (at least one of) the SUPER or REPLICATION_SLAVE_ADMIN privilege(s) for this operation

Grant command

CREATE USER 'replica_user'@'%' IDENTIFIED WITH mysql_native_password BY '***';

GRANT REPLICATION SLAVE ON *.* TO 'replica_user'@'%';

FLUSH PRIVILEGES;

SHOW GRANTS FOR syncuser;

Output

GRANT REPLICATION SLAVE ON *.* TO `syncuser`@`%`
Henry Le 0 Reputation points

2025-04-18T01:51:32.08+00:00

Can you please let me know how to grant the SUPER or **REPLICATION_SLAVE_ADMIN **for the replica user? I really appreciate for that
Mallaiah Sangi 1,145 Reputation points Microsoft External Staff Moderator

2025-04-18T07:38:23.7966667+00:00
Hi Henry Le

Thank you for taking the time to share your concerns.

To grant the SUPER or REPLICATION_SLAVE_ADMIN privileges to a replica user in MySQL, you can use the GRANT statement. Here's how you can do it.

Grant SUPER Privilege: GRANT SUPER ON *.* TO 'replica_user'@'host' IDENTIFIED BY 'password'; FLUSH PRIVILEGES; Replace 'replica_user' with the username, 'host' with the host (e.g., 'localhost' or '%' for any host), and 'password' with the desired password.

Grant REPLICATION_SLAVE_ADMIN Privilege: GRANT REPLICATION_SLAVE_ADMIN ON *.* TO 'replica_user'@'host' IDENTIFIED BY 'password'; FLUSH PRIVILEGES; Ensure that you have sufficient administrative rights to execute these commands. I hope this information helps. Please do let us know if you have any further queries
Henry Le 0 Reputation points

2025-04-18T09:00:06.22+00:00
Hi Mallaiah Sangi,

First and foremost, thanks so much for your quickly respond. But it's seem like a miss information here. Let me summary again about my issues.

I have using the default account of Azure MySQL Flexible server (masterlogin) which is limited by using the SUPER privileges .(https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-limitations)

I have granted the REPLICATION SLAVE privileges for the replica_user, but it's still appear an issues Error Code: 1227. Access denied; you need (at least one of) the SUPER or REPLICATION_SLAVE_ADMIN privilege(s) for this operation

There is a syntax issue in your command. I have used the GRANT REPLICATION SLAVE ON *.* TO ' replica_user'@'%'; command instead
Henry Le 0 Reputation points

2025-04-18T09:00:46.92+00:00

Please note that I have using the Azure MySQL Flexible and MySQL version is 8.0
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-22T06:39:55.4833333+00:00
If you're setting up a read replica and want users to access the replica server:

Manually re-create users on the replica server:
CREATE USER 'your_user'@'%' IDENTIFIED BY 'secure_password'; GRANT REPLICATION SLAVE ON *.* TO 'replica_user'@'replica_server_ip';

Ensure their privileges match the intended access model
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-23T03:33:20.51+00:00

Hi Henry Le,

We haven’t heard from you on the last response and wanted to follow up to check if your issue has been resolved.

If not, please share the server details here, as this will help us to conduct more thorough investigation.

Thank you,
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-24T08:55:27.8066667+00:00

Hi Henry Le,

We haven’t heard from you on the last response and wanted to follow up to check if your issue has been resolved.

If not, please share the server details here, as this will help us to conduct more thorough investigation.

Thank you,

Your answer

Mallaiah Sangi 1,145 Reputation points Microsoft External Staff Moderator

2025-04-17T16:45:59.1066667+00:00

Hi Henry Le

Greeting!

Yes, Azure MySQL Flexible Server supports outbound replication to third-party external replicas. This feature, known as Data-Out Replication.

To set this up, you'll need to configure the source server (Azure MySQL Flexible Server) and ensure proper networking and permissions for the external replica serve.

You can grant the required REPLICATION_SLAVE_ADMIN or SUPER privileges to the replication user.

CHANGE THE REPLICATION SOURCE TO SOURCE_HOST='<master_host>', SOURCE_USER='<master_user>', SOURCE_PASSWORD='<master_password>', SOURCE_LOG_FILE='<master_log_file>', SOURCE_LOG_POS=<master_log_pos>

master_host: hostname of the source server (example – 'source.mysql.database.Azure.com')

master_user: username for the source server (example - 'syncuser'@'%')

master_password: password for the source server

master_log_file: binary log file name from running show master status

master_log_pos: binary log position from running show master status

Please refer the Microsoft official documentation for details on data-out Replication.

https://learn.microsoft.com/en-us/azure/mysql/flexible-server/how-to-data-out-replication?tabs=command-line

I hope this information helps. Please do let us know if you have any further queries.
Henry Le 0 Reputation points

2025-04-18T01:50:28.81+00:00

Dear Mallaiah Sangi,

I really appreciate for your quickly respond.

I have faced an issues with "You can grant the required REPLICATION_SLAVE_ADMIN or SUPER privileges to the replication user". I have using the default account of Azure MySQL Flexible server (masterlogin) which is limited by using the SUPER privileges is limited.(https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-limitations)

Beside that I have granted the REPLICATION SLAVE privileges for the replica_user, but it's still appear an issues Error Code: 1227. Access denied; you need (at least one of) the SUPER or REPLICATION_SLAVE_ADMIN privilege(s) for this operation

Grant command

CREATE USER 'replica_user'@'%' IDENTIFIED WITH mysql_native_password BY '***';

GRANT REPLICATION SLAVE ON *.* TO 'replica_user'@'%';

FLUSH PRIVILEGES;

SHOW GRANTS FOR syncuser;

Output

GRANT REPLICATION SLAVE ON *.* TO `syncuser`@`%`
Henry Le 0 Reputation points

2025-04-18T01:51:32.08+00:00

Can you please let me know how to grant the SUPER or **REPLICATION_SLAVE_ADMIN **for the replica user? I really appreciate for that
Mallaiah Sangi 1,145 Reputation points Microsoft External Staff Moderator

2025-04-18T07:38:23.7966667+00:00

Hi Henry Le

Thank you for taking the time to share your concerns.

To grant the SUPER or REPLICATION_SLAVE_ADMIN privileges to a replica user in MySQL, you can use the GRANT statement. Here's how you can do it.

Grant SUPER Privilege: GRANT SUPER ON *.* TO 'replica_user'@'host' IDENTIFIED BY 'password'; FLUSH PRIVILEGES; Replace 'replica_user' with the username, 'host' with the host (e.g., 'localhost' or '%' for any host), and 'password' with the desired password.

Grant REPLICATION_SLAVE_ADMIN Privilege: GRANT REPLICATION_SLAVE_ADMIN ON *.* TO 'replica_user'@'host' IDENTIFIED BY 'password'; FLUSH PRIVILEGES; Ensure that you have sufficient administrative rights to execute these commands. I hope this information helps. Please do let us know if you have any further queries
Henry Le 0 Reputation points

2025-04-18T09:00:06.22+00:00

Hi Mallaiah Sangi,

First and foremost, thanks so much for your quickly respond. But it's seem like a miss information here. Let me summary again about my issues.

I have using the default account of Azure MySQL Flexible server (masterlogin) which is limited by using the SUPER privileges .(https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-limitations)

I have granted the REPLICATION SLAVE privileges for the replica_user, but it's still appear an issues Error Code: 1227. Access denied; you need (at least one of) the SUPER or REPLICATION_SLAVE_ADMIN privilege(s) for this operation

There is a syntax issue in your command. I have used the GRANT REPLICATION SLAVE ON *.* TO ' replica_user'@'%'; command instead
Henry Le 0 Reputation points

2025-04-18T09:00:46.92+00:00

Please note that I have using the Azure MySQL Flexible and MySQL version is 8.0
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-22T06:39:55.4833333+00:00

If you're setting up a read replica and want users to access the replica server:

Manually re-create users on the replica server:
CREATE USER 'your_user'@'%' IDENTIFIED BY 'secure_password'; GRANT REPLICATION SLAVE ON *.* TO 'replica_user'@'replica_server_ip';

Ensure their privileges match the intended access model
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-23T03:33:20.51+00:00

Hi Henry Le,

We haven’t heard from you on the last response and wanted to follow up to check if your issue has been resolved.

If not, please share the server details here, as this will help us to conduct more thorough investigation.

Thank you,
PratikLad 1,825 Reputation points Microsoft External Staff Moderator

2025-04-24T08:55:27.8066667+00:00

Hi Henry Le,

We haven’t heard from you on the last response and wanted to follow up to check if your issue has been resolved.

If not, please share the server details here, as this will help us to conduct more thorough investigation.

Thank you,

Share via

Error While Configuring Data-Out Replication on Azure MySQL Flexible Server (Error 1227 on Replica) to Digital Ocean MySQL

Your answer