Securich is an incredibly handy and versatile tool for managing user privileges on MySQL through the use of roles. It basically makes granting and revoking rights a piece of cake, not to mention added security it provides through password expiry and password history, the customization level it permits, the fact that it runs on any MySQL 5.1 or later and it's easily deployable on any official MySQL binary, platform independent. Other features include user rename, user clone, auditing of grants, revokes and password changes etc