16.10 - Characteristics of Directory Users Mapped to EXTUSER - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

Teradata Database automatically generates the default user EXTUSER. You can map directory users to EXTUSER to provide limited database access in the same way that PUBLIC provides limited access to permanent database users.

  • EXTUSER has privileges similar to PUBLIC by default.

    For information on PUBLIC privileges, see Default PUBLIC Privileges.

  • You can map a directory user to EXTUSER.
  • Mapping a directory user to any Teradata object also gives the user EXTUSER privileges.
  • EXTUSER has no PERM space, default database, default role, or profile.
  • EXTUSER has the same default spool and temp space allocations as user DBC. The allocations apply collectively to all users mapped to EXTUSER. You can create profiles that set lower spool and temp limits and map them to directory users mapped to EXTUSER.
  • Although the system creates an entry for EXTUSER in DBC.Dbase, it is not a valid user or database, and you cannot reference it in a logon string or SQL statement.
  • A user mapped only to EXTUSER can set the default database using a SET SESSION DATABASE statement.
  • You cannot configure workload management rules for users mapped only to EXTUSER.
  • If a directory user is mapped to EXTUSER or there is a role or profile mapping for a directory user, the directory user is logged on to the database as EXTUSER; however, if the DBSControl AutoProvision parameter is enabled, a database account is automatically provisioned for the user and they are logged on to the database as that user.