AVCLI User Commands

You can run AVCLI user commands to create users, assign roles, reset passwords, and delete users.

About the User AVCLI Commands

The AVCLI general user commands enable you to perform tasks such as creating and dropping Oracle Audit Vault users.

ALTER ADMIN

This command is used to modify an ADMIN user type or reset an ADMIN user’s password. This command can be run only by a SUPERADMIN user.

Syntax

ALTER ADMIN <username> ADMIN TYPE <type>

This command changes the ADMIN user’s type.

ALTER ADMIN <username> CHANGE PASSWORD

This command resets the password of the specified user name. The user password is taken from the prompt.

Arguments

Argument	Description
user name	The existing user with ADMIN role who requires a password reset.
type	Type specifies the particular type of ADMIN role being created. The type can only be either ADMIN or SUPERADMIN.
password	The command prompts a password for modifying the password of the user with ADMIN role. The password must have at least one uppercase letter, one lowercase letter, one digit(0-9), and one special character(.,+:_!). A password must be at least 8 characters and at most 30 bytes in length.

Examples

alter admin myadmin admin type admin;

Changes the type of user myadmin to ADMIN role.

alter admin myadmin change password;

Resets the password of user myadmin. The password for myadmin is taken from the prompt.

ALTER AUDITOR

Use the ALTER AUDITOR command to reset the password for existing auditors or superauditor users. Only a superauditor can reset the password for auditors or superauditor users.

Syntax

ALTER AUDITOR <username> AUDITOR TYPE <type>

This command changes the AUDITOR user’s type.

ALTER AUDITOR <username> CHANGE PASSWORD

This command resets the password of the specified user name. The user password is taken from the prompt.

Arguments

Argument	Description
user name	The existing user with AUDITOR role who requires a password reset.
type	Type specifies the particular type of AUDITOR role being created. The type can only be either AUDITOR or SUPERAUDITOR.
password	The command prompts a password for modifying the password of the user with AUDITOR role. The password must have at least one uppercase letter, one lowercase letter, one digit(0-9), and one special character(.,+:_!). A password must be at least 8 characters and at most 30 bytes in length.

Examples

alter auditor myauditor auditor type superauditor;

Modify the type of user myauditor to SUPERAUDITOR role.

alter auditor myauditor change password;

Resets the password of user myauditor. The password for myauditor is taken from the prompt.

CREATE ADMIN

Use the CREATE ADMIN command to create users with the admin role. Only a superadmin can create a user with admin role.

The CREATE ADMIN command create users with the admin role. A superadmin can create a user with admin role.

Syntax

CREATE ADMIN <user name> ADMIN TYPE <type>

This command prompts a password and creates a user with the specified user name and assigns ADMIN or SUPERADMIN privileges.

Arguments

Argument	Description
user name	The name of the user being created with ADMIN role. The user name cannot be null, start with any reserved user name, or be the same as any of the existing user role. It must be alphanumeric only and can contain underscore (_), dollar sign ($), and pound sign (#). It can have a maximum of 30 characters in length.
password	The command prompts a password before creating a user with ADMIN role. The password must have at least one uppercase letter, one lowercase letter, one digit(0-9), and one special character(.,+:_!). A password must be at least 8 characters and at most 30 bytes in length.
type	Type specifies the particular type of administrator role being created. The type can only be either ADMIN or SUPERADMIN. ADMIN gives administrator privileges, while SUPERADMIN gives super administrator privileges.

Example

create admin myadmin admin type superadmin

Creates user myadmin with SUPERADMIN type. The user password is taken from the prompt.

CREATE AUDITOR

Use the CREATE AUDITOR command to create users with the auditor role. Only superauditors can create users with the auditor role.

The CREATE AUDITOR command creates a user with the auditor role. A superauditor can create a user with auditor role.

Syntax

CREATE AUDITOR *user name*

Arguments

Argument	Description
user name	The name of the user being created with auditor role. The user name cannot be null, start with any reserved user name, or the same as any of the existing user role. It must be alphanumeric only and can contain underscore (_), dollar sign ($), and pound sign (#).
password	The command prompts a password before creating a user with auditor role. The password must have at least one uppercase letter, one lowercase letter, one digit(0-9), and one special character(.,+:_!). A password must be at least 8 characters and at most 30 bytes in length.

Example

create auditor myauditor

This command creates a user myauditor with auditor role. The user password is taken from the prompt.

Syntax

CREATE AUDITOR <username> AUDITOR TYPE <type>

This command prompts a password and creates a user with the specified user name and assigns AUDITOR privileges.

Arguments

Argument	Description
user name	The name of the user being created with auditor role. The user name cannot be null, start with any reserved user name, or the same as any of the existing user role. It must be alphanumeric only and can contain underscore (_), dollar sign ($), and pound sign (#). It can have a maximum of 30 characters in length.
password	The command prompts a password before creating a user with auditor role. The password must have at least one uppercase letter, one lowercase letter, one digit(0-9), and one special character(.,+:_!). A password must be at least 8 characters and at most 30 bytes in length.
type	Type specifies the particular type of auditor role being created. The type can only be either AUDITOR or SUPERAUDITOR. AUDITOR gives auditor privileges, while SUPERAUDITOR gives super auditor privileges.

Example

create auditor myauditor auditor type superauditor;

Creates user myauditor with SUPERAUDITOR type. The user password is taken from the prompt.

DROP ADMIN

Use the DROP ADMIN command to drop or delete admin or superadmin users. Only a superadmin can drop an admin or superadmin user.

The DROP ADMIN command drops or deletes a user with admin role. A superadmin can drop a user with admin role.

Syntax

DROP ADMIN *user name*

Arguments

Argument	Description
user name	The existing user with admin role who needs to be dropped or deleted.

Example

drop admin myadmin

This command drops the existing user myadmin. The command performs a cleanup, expire the password, lock the account, terminate any existing sessions for the user, and drop the user completely from the database.

DROP AUDITOR

Use the DROP AUDITOR command to drop or delete auditors or superauditor users. Only superauditors can drop an auditor or superauditor user.

The DROP AUDITOR command drops or deletes a user with auditor role. A superauditor can drop a user with auditor role.

Syntax

DROP AUDITOR *user name*

Arguments

Argument	Description
user name	The existing user with auditor role who needs to be dropped or deleted.

Example

drop auditor myauditor

This command drops the existing user myauditor. The command performs a cleanup, expire the password, lock the account, terminate any existing sessions for the user, and drop the user completely from the database.

LIST ADMIN

Use the LIST ADMIN command to see administrator privileges for a specific user.

The LIST ADMIN command lists administrator privileges for a specific user.

Syntax

LIST ADMIN <username>

This command lists the administrator privileges for a specific user.

Argument

Argument	Description
username	The specified user.

Example

list admin scott;

Lists the administrator privileges of a specific user scott.

LIST ADMINS

Use the LIST ADMINS command to view or get a list of all users with administrator privileges.

The LIST ADMINS command lists all users with administrator privileges.

Syntax

LIST ADMINS

Example

list admins;

List all users with administrator privileges.

LIST AUDITOR

Use the LIST AUDITOR command to see auditor privileges for a specific user.

The LIST AUDITOR command lists auditor privileges for a specific user.

Syntax

LIST AUDITOR <username>

This command lists the auditor privileges for a specific user.

Argument

Argument	Description
username	The specified user.

Example

list auditor scott;

Lists the auditor privileges of a specific user scott.

LIST AUDITORS

Use the LIST AUDITORS command to view or get a list of all users with auditor privileges.

The LIST AUDITORS command lists all users with auditor privileges.

Syntax

LIST AUDITORS

Example

list auditors;

List all users with auditor privileges.