ALTER USER

Name

ALTER USER

Description

The ALTER USER command is used to modify a user’s account attributes, including passwords, and password policies, etc.

Note that.

This command give over supports modifying user roles from versions 2.0. Please use GRANT and REVOKE for related operations

1. ALTER USER [IF EXISTS] user_identity [IDENTIFIED BY 'password']
2. [password_policy]

4. user_identity:
5. 'user_name'@'host'

7. password_policy:

9. 1. PASSWORD_HISTORY [n|DEFAULT]
10. 2. PASSWORD_EXPIRE [DEFAULT|NEVER|INTERVAL n DAY/HOUR/SECOND]
11. 3. FAILED_LOGIN_ATTEMPTS n
12. 4. PASSWORD_LOCK_TIME [n DAY/HOUR/SECOND|UNBOUNDED]
13. 5. ACCOUNT_UNLOCK

About user_identity and password_policy, Please refer to CREATE USER.

ACCOUNT_UNLOCK is used to unlock a locked user.

In an ALTER USER command, only one of the following account attributes can be modified at the same time:

1. Change password
2. Modify PASSWORD_HISTORY
3. Modify PASSWORD_EXPIRE
4. Modify FAILED_LOGIN_ATTEMPTS and PASSWORD_LOCK_TIME
5. Unlock users

Example

1. Change the user’s password

1. ALTER USER jack@'%' IDENTIFIED BY "12345"; 2. Modify the user’s password policy

1. ALTER USER jack@'%' FAILED_LOGIN_ATTEMPTS 3 PASSWORD_LOCK_TIME 1 DAY; 3. Unlock a user

1. ALTER USER jack@'%' ACCOUNT_UNLOCK

Keywords

1. ALTER, USER

Best Practice

1. Modify the password policy

2. Modify PASSWORD_EXPIRE will reset the timing of password expiration time.

3. Modify FAILED_LOGIN_ATTEMPTS or PASSWORD_LOCK_TIME will unlock the user.