Accounts that access databases.
WHAT A USER IS
An account permitted to connect to one or more databases, with defined privileges.
Separate from your cPanel user and separate from your application's login.
CREATING ONE
cPanel > MySQL Databases > MySQL Users > Add New User.
The username receives your cPanel prefix automatically.
ASSIGNING IT
Add User To Database, then choose privileges. For a normal application, ALL PRIVILEGES.
ONE USER PER APPLICATION
Give each application its own user with access only to its own database.
A shared user with access to everything means one application's vulnerability exposes all of them.
CHANGING A PASSWORD
The same screen. Remember to update the application's configuration to match, or the site breaks immediately.
REMOVING A USER
When you remove an application, remove its user too. Orphaned users accumulate.
WHAT USERS CANNOT DO
Log in to your website. They are database accounts, not application accounts.
Confusing the two is common.