GRANT
    all privileges
    on intranet.*
    to intranet@localhost
    identified by '[password]';
GRANT
    all SELECT
    on *.*
    to intranet@localhost
    identified by '[password]';
