Example

CREATE USER 'report_user'@'localhost' IDENTIFIED BY 'securepass';
GRANT SELECT ON sales_db.* TO 'report_user'@'localhost';