Effects of Profile-Based Password Controls - Analytics Database - Teradata Vantage

SQL Data Definition Language Syntax and Examples

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
VMware
Product
Analytics Database
Teradata Vantage
Release Number
17.20
Published
June 2022
Language
English (United States)
Last Update
2024-10-04
dita:mapPath
jco1628111346878.ditamap
dita:ditavalPath
qkf1628213546010.ditaval
dita:id
mdr1472255012272
lifecycle
latest
Product Category
Teradata Vantage™

The effects of password controls specified in a profile definition vary from those controls applied directly to a user in a CREATE USER or MODIFY USER statement.

Password Control Attribute Effects
EXPIRE Applies to first level user to which the profile is assigned, and is effective immediately
MINCHAR and MAXCHAR Does not apply to first level user to which the profile is assigned, rather it applies only to the children of that user.

As a result of these second-level effects, if the user submitting the CREATE USER statement is a member of a profile that specifies values for password control attributes, the password the creator assigns in the CREATE USER statement must comply with the password controls in the creator profile.

Controls take effect at the first child user logon after the child is created or modified.

To apply password controls to first-level users not affected by profile-based controls, you can Allow the users to defer to the global controls in DBC.SysSecDefaults.

DIGITS
REUSE
SPECCHAR
RESTRICTWORDS
MAXLOGONATTEMPTS Applies to first level users to which the profile is assigned, at the next logon attempt.
LOCKEDUSEREXPIRE