@mysql_grant {"service":
  user => "$user",
  name => "$user/*.*",
  table => '*.*',
  privileges => ['ALL'],
  options => ['GRANT'],
  tag => 'admin',
}

Mysql_grant <| tag == 'admin' |> { user => "foo@%",}
Mysql_grant <| tag == 'admin' |> { user => "foobar@%",}