Managing users and groups
The Users and groups view displays all of your database user accounts and groups.
Users
Creating users
-
Go to Users and groups > Users.
-
Click Create user.
-
In the General settings section, select the following:
-
Authentication type
-
Username
The name must begin with a letter or an underscore. The name cannot contain embedded spaces. It must be unique within the system. It can have 128 characters. -
Password
The password must have 15 characters, 1 upper case letter, 1 lower case letter, 1 special character, and a number. -
Resource group
-
Account expiration date
Specify whether the user account never expires or select an expiration date. -
Password expiration date
Specify whether the password of the user account never expires or select an expiration date.
-
-
Optionally, you can add the user account to any available groups by ticking the box next to the name of the group.
If you want a user to have the necessary privileges to do scaling, pause and resume operations, and backup and restore, you must add the user to the ADMINISTRATORS group.
Information about users
Value | Description |
---|---|
Username | Specifies the database user name. |
Resource group | Specifies the database group to which the user belongs and which controls the workload settings such as GRA and resource percentages. |
Owner | Specifies the owner of the user account. |
Tables | Specifies the number of tables that are owned by the user account. |
Password expiration | Specifies when a user password expires. |
Created on | Specifies when the user was created. |
Authentication type | Specifies the authentication type. |
User actions
In the users list view, there is an overflow menu that lists the actions that can be taken on the user.
Value | Description |
---|---|
Assign owner | Set the owner of the user account. |
Change password | Change the password for the system user. |
Account expiration | Set a date that the system user account will be valid until. |
Password expiration | Set a number of days until the password for the user account expires. |
Rename | Change the username of the user account. |
Admin privileges | View and grant admin privileges. |
Object privileges | View and grant object privileges. |
Remove | Delete the user account from the system. |
Granting admin privileges to users
User privileges dictate what actions can be taken by a particular user account. When new users are created, they have no privileges, so in most cases privileges need to be added.
-
Go to Users and groups > Users.
-
Select the user for which you want to grant admin privileges and select Admin privileges from the overflow menu.
In this view, you can see different admin privileges, which are already granted or that can be granted to the selected user.
Granting these privileges allows the user to do the actions that the privileges correspond to. Granting privileges on global database and global schema unlocks all the privileges to the user equivalent to an admin. -
Click Edit.
-
Update, grant, or revoke object privileges by putting ticks in corresponding boxes.
-
Click Save.
Granting object privileges to users
User privileges dictate what actions can be taken by a particular user account. When new users are created, they have no privileges, so in most cases privileges need to be added.
-
Go to Users and groups > Users.
-
Select the user for which you want to grant object privileges and select Object privileges from the overflow menu.
-
Select a database.
You can choose between the Global database and a specific database. Global means that the privileges are related to generic object types such as views, tables, databases, groups.
If you choose Global, the privilege is assigned globally across the system. If the user account is given Create table privileges, this user can create a table in any database. -
Select a schema.
If you selected Global for the database in step 3, skip this step. -
Click Edit.
-
Update, grant, or revoke object privileges by putting ticks in corresponding boxes.
-
Click Save.
Removing users
- Go to Users and groups > Users.
- Select the user that you want to remove and select Remove from the overflow menu.
In the confirmation pop up, click Remove to remove the user or Cancel to cancel this action.
Groups
Creating groups
-
Go to Users and groups > Groups.
-
Click Create group.
-
In the General settings section, select the following:
- Name
- Password expiration date
-
Specify resource allocation settings.
-
Specify session settings.
-
Add users.
In the Include users section, specify which users to add to the group when it's created. -
Click Create.
Information about groups
Value | Description |
---|---|
Name | Specifies the name of the group. |
Owner | Specifies the database user who owns the group. |
Default priority | Specifies the workload management control that specifies the default priority for queries that are run by the users in this group. |
Max priority | Specifies the workload management control that specifies the maximum priority that a user in the group can assign to sessions or queries. |
Password expiration | Specifies when a group password expires. |
Created on | Specifies when the group was created. |
Groups actions
In the Groups list view, there is an overflow menu that lists the actions that can be taken on each group.
Value | Description |
---|---|
Password expiration | Set the time in days after which the password expires for the members of a group. |
Assign owner | Set the owner of the group. |
Manage users | Add or remove users from the group. |
Rename | Change the group name. |
Admin privileges | View and grant admin privileges. |
Object privileges | View and grant object privileges. |
Remove | Delete the group from the system. |
Granting admin privileges to groups
Group privileges dictate what actions can be taken by users who are a part of the group.
-
Go to Users and groups > Groups.
-
Select the group for which you want to grant admin privileges and select Admin privileges from the overflow menu.
In this view, you can see different admin privileges, which are already granted or that can be granted to the selected group.
Granting these privileges allows the users that belong to the group to do the actions that the privileges correspond to. Granting privileges on global database and global schema unlocks all the privileges to the user equivalent to an admin. -
Click Edit.
-
Update, grant, or revoke object privileges by putting ticks in corresponding boxes.
-
Click Save.
Granting object privileges to groups
Group privileges dictate what actions can be taken by users who are a part of the group.
-
Go to Users and groups > Groups.
-
Select the group for which you want to grant object privileges and select Object privileges from the overflow menu.
-
Select a database.
You can choose between the Global database and a specific database. Global means that the privileges are related to generic object types such as views, tables, databases, groups.
If you choose Global, the privilege is assigned globally across the system. -
Select a schema.
If you selected Global for the database in step 3, skip this step. -
Click Edit.
-
Update, grant, or revoke object privileges by putting ticks in corresponding boxes.
-
Click Save.
Comparing groups
- Go to Users and groups > Groups.
- Click Workload management.
- Click Compare groups.
- Select the groups you want to compare.
- Select the time within which you want to compare the chosen groups.
You can see the results on the Comparison graph.
Removing groups
- Go to Users and groups > Groups.
- Select the group that you want to remove and select Remove from the overflow menu.
In the confirmation pop up, click Remove to remove the group or Cancel to cancel this action.