diff --git a/docs/pages/database-access/architecture.mdx b/docs/pages/database-access/architecture.mdx
index 7d8dba5bc5ee7..5fb0309fa6850 100644
--- a/docs/pages/database-access/architecture.mdx
+++ b/docs/pages/database-access/architecture.mdx
@@ -87,7 +87,7 @@ can refer to.
 
 For configuring graphical clients, there is a `tsh db config` command that
 prints detailed information about the connection such as host/port and location
-of the secrets. See [GUI Clients](./gui-clients.mdx) for details.
+of the secrets. See [GUI Clients](./guides/gui-clients.mdx) for details.
 
 ### Proxy to Database Service
 
diff --git a/docs/pages/database-access/guides/mysql-aws.mdx b/docs/pages/database-access/guides/mysql-aws.mdx
index 5302406f0f85d..f7f7510ec8dad 100644
--- a/docs/pages/database-access/guides/mysql-aws.mdx
+++ b/docs/pages/database-access/guides/mysql-aws.mdx
@@ -67,6 +67,13 @@ access. For MySQL:
 CREATE USER alice IDENTIFIED WITH AWSAuthenticationPlugin AS 'RDS';
 ```
 
+By default the created user may not have access to anything and won't be able
+to connect so let's grant it some permissions:
+
+```sql
+GRANT ALL ON `%`.* TO 'alice'@'%';
+```
+
 See [Creating a database account using IAM authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.DBAccounts.html)
 for more information.
 
diff --git a/docs/pages/database-access/guides/mysql-self-hosted.mdx b/docs/pages/database-access/guides/mysql-self-hosted.mdx
index c09695f3710c5..4793937cfc3ce 100644
--- a/docs/pages/database-access/guides/mysql-self-hosted.mdx
+++ b/docs/pages/database-access/guides/mysql-self-hosted.mdx
@@ -60,6 +60,13 @@ CREATE USER 'alice'@'%' REQUIRE X509;
 ALTER USER 'alice'@'%' REQUIRE X509;
 ```
 
+By default the created user may not have access to anything and won't be able
+to connect so let's grant it some permissions:
+
+```sql
+GRANT ALL ON `%`.* TO 'alice'@'%';
+```
+
 See [Configuring MySQL to Use Encrypted Connections](https://dev.mysql.com/doc/refman/8.0/en/using-encrypted-connections.html)
 in MySQL documentation for more details.