The following steps describe how to use profiles to manage a common set of parameters for a group of users.
- Define a user profile.
A CREATE PROFILE statement defines a profile, and lets you set:
- Account identifiers to charge for the space used and a default account identifier
- Default database
- Space to allocate for spool files and temporary tables
- Optimizer cost profile to activate at the session and request scope level
- Number of incorrect logon attempts to allow before locking a user and the number of minutes before unlocking a locked user
- A query band to enforce query band name/value pairs
- Number of days before a password expires and the number of days before a password can be used again
- Minimum and maximum number of characters in a password string
- The characters allowed in a password string, including whether to:
- Allow digits and special characters
- Require at least one numeric character
- Require at least one alpha character
- Require at least one special character
- Restrict the password string from containing the user name
- Require a mixture of uppercase and lowercase characters
- Restrict certain words from being a significant part of a password string
- Assign the profile to users.
Use the CREATE USER or MODIFY USER statement to assign a profile to a user. Profile settings override the values set for the user.
- If necessary, change any of the system parameters for a profile.
Use the MODIFY PROFILE statement to change a profile.