You can use the CREATE PROFILE statement to assign security constraints to a profile, and then use the CREATE USER or MODIFY USER statement to assign the profile to users.
You can also use a GRANT CONNECT THROUGH statement to assign a profile to an application proxy user.
- Create the profile and assign one or more security constraints, for example:
CREATE PROFILE profile_name AS ... , CONSTRAINT = Classification_Level (Secret, Unclassified DEFAULT), CONSTRAINT = Classification_Country (US, UK, GER);
- Assign the profile constraints to users by naming the profile in a CREATE USER or MODIFY USER statement. For example:
[CREATE|MODIFY] USER AS PROFILE = profile_name
A new or changed security constraint assignment takes effect at the next user logon.