1a) Connect to mysql (via localhost)

mysql -uroot -p

2. Create user

   CREATE USER 'user'@'%' IDENTIFIED BY 'password';

3. Grant permissions

   GRANT ALL PRIVILEGES ON *.* TO 'user'@'%' WITH GRANT OPTION;

4. Flush privileges

   FLUSH PRIVILEGES;

Although /etc/mysql/mysql.conf.d has these lines: comment it

#bind-address        = 127.0.0.1

Host 'xxx.xx.xxx.xxx' is not allowed to connect to this MySQL server - Stack Overflow

Sometime, just need to updrade Workbench if you use it to access MYSQL.