ALTER USER

Purpose

This statement is mainly used for the following operations:

• Modifying the password of an OceanBase Database user.

• Locking or unlocking a user. A locked user cannot log in to the database.

  Note

  Except for modifying the password of the current user, you must have the CREATE USER privilege to execute this statement.

• Setting the default activated role for a user when it logs in.

• Modifying the resource options of a user.

Privilege requirements

To execute the ALTER USER statement, the current user must have the CREATE USER privilege. For more information about OceanBase Database privileges, see Privilege types in MySQL mode.

Syntax

• Modifying the password of a user:

  ALTER USER 'user_name' IDENTIFIED BY 'password';
  

• Locking a user:

  ALTER USER 'user_name' [ACCOUNT LOCK | ACCOUNT UNLOCK];
  

• Setting the default activated role for a user when it logs in:

  ALTER USER user_name DEFAULT ROLE {NONE | ALL | role_name [, role_name ...]};
  

• Modifying the resource options of a user:

  ALTER USER user_name WITH  resource_option [resource_option];
  
  resource_option:
      MAX_CONNECTIONS_PER_HOUR integer
      | MAX_USER_CONNECTIONS integer
  

Parameters

Examples

• Execute the following command to change the password of the sqluser01 user to ******.

  obclient> ALTER USER 'sqluser01' IDENTIFIED BY '******';
  

• Lock the obsqluser01 user.

  obclient> ALTER USER 'obsqluser01' ACCOUNT LOCK;
  

• Unlock the obsqluser01 user.

  obclient> ALTER USER 'obsqluser01' ACCOUNT UNLOCK;
  

• Specify that the role001 and role002 roles granted to the user001 user are activated by default when it logs in.

  ALTER USER user001 DEFAULT ROLE role001, role002;