ALTER USER user-name 
 [ IDENTIFIED BY  password  ]
 [ LOGIN POLICY policy-name ]
 [ FORCE PASSWORD CHANGE { ON | OFF } ]

ALTER USER user-name
[ RESET LOGIN POLICY ]

ALTER USER user-name
REFRESH DN 

ALTER USER user-name 
 [ IDENTIFIED { FIRST | LAST } BY password-part ]

The following list describes the requirements for user IDs and passwords. The requirements and restrictions for a password part are the same as those described for a password except that the maximum length of each part is 127 bytes.

The verify_password_function login policy option can be used to specify a function to implement password rules (for example, passwords must include at least one digit). If a password verification function is used, you cannot specify more than one user ID and password in the GRANT CONNECT statement.

If you set the password_expiry_on_next_login value to ON, the user's password expires immediately when they next login even if they are assigned to the same policy. You can use the ALTER USER and LOGIN POLICY clauses to force a user to change their password when they next login.

The ALTER USER...REFRESH DN syntax clears the Distinguished Name (DN) and timestamp of a user so that during the next LDAP authentication, a search for the DN is performed, instead of using the cached DN, which can become out of date. If the authentication succeeds, then both the DN and the timestamp are updated with the new DN and current time.

Any user can change their own password.

To change passwords for other users, you must have the CHANGE PASSWORD system privilege.

For all other changes to other users, including forcing users to change their password, you must have the MANAGE ANY USER system privilege.

None.

The following statement alters a user named SQLTester, setting their password to welcome123, setting their login policy to Test1, and allowing them to bypass a forced password change.

ALTER USER SQLTester IDENTIFIED BY welcome123
LOGIN POLICY Test1
FORCE PASSWORD CHANGE off;

The following example refreshes the LDAP Distinguished Name for user myusername.

ALTER USER myusername REFRESH DN;

• ALTER LOGIN POLICY statement
• COMMENT statement
• CREATE LOGIN POLICY statement
• CREATE USER statement
• DROP LOGIN POLICY statement
• DROP USER statement
• verify_password_function option
• Login policies
• Assigning a login policy to an existing user
• GRANT CONNECT statement