[Answer]-Django: mysql query with arguments

A simple way to get around this.

grant = "GRANT USAGE ON %s.* TO '%s'@'%s'" % [db, user, host]
cursor.execute(grant)

HTH