17.10 - Characteristics of Directory Users Mapped to EXTUSER - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Release Date
July 2021
Content Type
Administration
Security
Publication ID
B035-1100-171K
Language
English (United States)
Teradata Vantage automatically generates the default user EXTUSER. You can map directory users to EXTUSER to provide limited database access in the same way that PUBLIC provides limited access to permanent database users.
  • EXTUSER has privileges similar to PUBLIC by default.

    For information on PUBLIC privileges, see Default PUBLIC Privileges.

  • You can map a directory user to EXTUSER.
  • Mapping a directory user to any Vantage object also gives the user EXTUSER privileges.
  • EXTUSER has no PERM space, default database, default role, or profile.
  • EXTUSER has the same default spool and temp space allocations as user DBC. The allocations apply collectively to all users mapped to EXTUSER. You can create profiles that set lower spool and temp limits and map them to directory users mapped to EXTUSER.
  • Although the system creates an entry for EXTUSER in DBC.Dbase, it is not a valid user or database, and you cannot reference it in a logon string or SQL statement.
  • A user mapped only to EXTUSER can set the default database using a SET SESSION DATABASE statement.
  • You cannot configure workload management rules for users mapped only to EXTUSER.
  • If a directory user is mapped to EXTUSER or there is a role or profile mapping for a directory user, the directory user is logged on to the database as EXTUSER; however, if the DBSControl AutoProvision parameter is enabled, a database account is automatically provisioned for the user and they are logged on to the database as that user.