MariaDB Custom users

Hi Team,

I would like to know how do we create following users in MariaDB ?

Security Officer (sso_role) : This user should only create other users, but shouldn’t have all other DBA privileges.
Emergency user ( root) : This user usually comes in to picture when there’s an emergency, otherwise any unauthorized access should lock this user as it’s a super user.
dba_readonly : This user should able do all DBA activities and read Databases, except any data manipulations.

Example : This is not working as expected for me.

GRANT

[ALTER,ALTER ROUTINE,CREATE,CREATE ROUTINE,CREATE TEMPORARY TABLES,CREATE VIEW,CREATE USER,DELETE,DROP,EVENT,EXECUTE,FILE,GRANT OPTION,
INDEX,INSERT,LOCK TABLES,PROCESS,PROXY,REFERENCES,RELOAD,REPLICATION CLIENT,REPLICATION SLAVE,SELECT,SHOW DATABASES,SHOW VIEW,SHUTDOWN,
SUPER,TRIGGER,CREATE TABLESPACE,UPDATE,USAGE]

ON .

TO 'sso_role'@'%'

IDENTIFIED BY 'password' ;

Thanks,
Srinivas