3.3.3 DBA Users

Use the DBA Users dashboard to view database users, review account status, create users, edit users, clone users, lock or unlock accounts, expire passwords, and delete users.

To open the DBA Users dashboard:

1. Open SQL Developer for VS Code.
2. In the Connections panel, expand your database connection tree.
3. Expand DBA, and then expand Security.
4. Select Users.

The DBA Users dashboard opens and displays information about the current user and a grid listing other database users available in the schema.

Description of the illustration dba_users_dashboard.png

Manage Users from the Dashboard

You can perform the following common operations from the dashboard:

• Create User: Opens the User Editor with a blank user definition.
• Edit: Opens the selected user in the User Editor. Fields that cannot be changed are read-only.
• Clone: Creates a new user from the selected user as a template.
• Lock/Unlock: Locks or unlocks the selected user account.
• Expire Password: Expires the selected user password.
• Delete: Drops the selected user after confirmation.
• Filter: Displays the users that match the specified criteria.

3.3.3.1 Creating or Editing a User

Use the User Editor to create a new user or edit an existing user. Editing a user uses the same editor as creating a user. Fields that cannot be modified are displayed as read-only.

Perform the following steps to create a user:

1. On the DBA Users dashboard, click Create User.
   Alternatively, in the Connections panel, click the + icon next to Users.
   The User Editor opens. When creating a user, the editor opens with a blank user definition.

   Note:

   To edit an existing user, locate the user in the DBA Users dashboard and select Edit from the actions menu (...) menu. The User Editor opens and displays the current user definition. Modify the user details as required.

   
   

   
   Description of the illustration dba_create_user.png

   
   
2. On the User page, specify the user details.
   • In the Name field, enter the database user name.
   • In New password, enter the password for the user.
   • In Confirm password, enter the password again.
   • In Profile, select the database profile for the user. By default, DEFAULT is selected.
   • Select Password expired to require the user to change the password at the next login.
   • Select Lock account to create or update the user with the account locked.
   • Select REST, GraphQL, MongoDB API, and Web access to enable access for the user through supported REST-enabled services.
3. On the Privileges page, grant or revoke system privileges.

   The page displays the available system privileges in a grid. Use the Grant column to grant a privilege to the user. Use the Admin option column to allow the user to grant that privilege to other users or roles. The Selected privileges count shows the number of privileges currently selected.

   You can use the following actions to update privileges in bulk:

   • Grant all: Grants all listed privileges to the user.
   • Revoke all: Revokes all listed privileges from the user.
   • Admin all: Enables all the Admin privileges to the user.
   • Admin none: Removes all the Admin privileges from the user.
4. On the Roles page, grant or revoke roles.

   The page displays the available database roles in a grid. Use the Grant column to grant a role to the user. Use the Admin option column to allow the user to grant that role to other users or roles. Use the Default column to make the role enabled by default for the user. The Selected roles count shows the number of roles currently selected.

   You can use the following actions to update roles in bulk:

   • Grant all: Grants all listed roles to the user.
   • Revoke all: Revokes all listed roles from the user.
   • Admin all: Enables the Admin privileges for all granted roles to the user.
   • Admin none: Removes the Admin privileges from all granted roles to the user.
   • Default all: Grants all the default roles to the user.
   • Default none: Removes the default roles from the user.
5. On the DDL page, review the SQL statements before applying the change.

   The Create tab shows the SQL statements used to create the user. The Update tab shows the SQL statements used to update an existing user. Review the generated SQL to confirm the user definition, privilege grants, role grants, and default role settings.

6. Click Apply to create or update the user.

   The Output page opens and displays status messages, errors, or operation results.

The new or updated user appears in the DBA Users dashboard.

3.3.3.2 Clone, Lock, Unlock, or Expire a User Password

Use the row action menu (...) in the DBA Users grid for account management actions. The menu includes Edit, Clone, Lock/Unlock account, Expire password, and Delete.

Description of the illustration dba_users_actions.png

• To clone a user, select Clone from the row action menu. Review the copied details, privileges, and roles before applying the new user definition.
• To lock or unlock an account, select the corresponding row action (Lock or Unlock) and verify the status message.
• Expire Password requires the selected user to change the password at the next sign-in. To expire the user's password, select Expire password.
• To delete a user, select Delete from the row action menu and confirm only after verifying that the account should be removed.