Add port 3306 to your firewall rules (both IN and OUT), then you can connect to your mysql outside of the server
Grant remote access to specific IP All Database
GRANT ALL PRIVILEGES ON *.* TO 'USERNAME'@'1.2.3.4' IDENTIFIED BY 'PASSWORD' WITH GRANT OPTION;
Revoke permision:
REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'USERNAME'@'1.2.3.4';
Check permission
SELECT * from information_schema.user_privileges where grantee like "'USERNAME'%";