@jcrespo @elukey I assume we have to change the password at:

private: modules/passwords/manifests/init.pp

For the research mysql user there.
The password on the pw repo for: research.mysql doesn't match the one on the init.pp (which seems like the correct one though as per the hash) so not sure if we have to update that one too or if that one is old.

And then manually change it on dbstore1002 and db1047 (research user isn't at db1046). Is there anything else that needs changing?

SET PASSWORD FOR 'research'@'%' = PASSWORD('newpass');

Modified the password manually on dbstore1002 and db1047, plus updated the private puppet repo (init.pp) with the new password.

Is there anything else left to do here?

I don't think so