ALTER USER

Purpose

You can use this statement to perform the following operations:

• Change the password of an OceanBase Database user.

• Lock or unlock a user. A locked user cannot log in to OceanBase Database.

  Note

  To execute this statement to perform an operation other than changing the password of the current user, you must have the CREATE USER privilege.

• Set the default roles activated for a user upon login.

Required privileges

To execute the ALTER USER statement, you must have the CREATE USER privilege. For more information about privileges in OceanBase Database, see Privilege types in MySQL mode.

Syntax

• Change the password of a user.

  ALTER USER 'user_name' IDENTIFIED BY 'password';
  

• Lock a user.

  ALTER USER 'user_name' [ACCOUNT LOCK | ACCOUNT UNLOCK];
  

• Set the default roles activated for a user upon login.

  ALTER USER user_name DEFAULT ROLE {NONE | ALL | role_name [, role_name ...]};
  

Parameters

Examples

• Change the password of the sqluser01 user to ******.

  obclient> ALTER USER 'sqluser01' IDENTIFIED BY '******';
  

• Lock the obsqluser01 user.

  obclient> ALTER USER 'obsqluser01' ACCOUNT LOCK;
  

• Unlock the obsqluser01 user.

  obclient> ALTER USER 'obsqluser01' ACCOUNT UNLOCK;
  

• Specify to activate the role001 and role002 roles granted to the user001 user by default when the user logs in.

  ALTER USER user001 DEFAULT ROLE role001, role002;
  

References

• Activate a role
• View roles