ALTER USER

Updates the configuration of the specified user. ALTER USER cannot change engine-managed system users. The bootstrap admin configured in auth.admin is one such user where that configuration is used. For more information, see Managing users.

Users can modify most of their own account settings without requiring RBAC permissions, except when altering LOGIN configurations, a SERVICE ACCOUNT, or PASSWORD_LOGIN.

ALTER USER SET

Syntax

ALTER USER <user_name> SET
	[ LOGIN = <login_name> | DEFAULT ]
        [ SERVICE_ACCOUNT = <service_account_name> | DEFAULT ]
        [ DEFAULT_DATABASE = <database_name> | DEFAULT ]
	[ DEFAULT_ENGINE = <engine_name> | DEFAULT ];

ALTER USER <user_name> RENAME TO <new_user_name>;

Parameters

Parameter	Description
`<user_name>`	The name of the user, may contain non-alpha-numeric characters such as exclamation points (!), percent signs (%), dots (.), underscores (_), dashes (-), and asterisks (*). Strings containing non-alphanumeric characters must be enclosed in single or double quotes. For more information about the full set of naming rules, see the object identifiers guide.
`<new_user_name>`	The new name of the user, used with the `RENAME TO` option. The new user name can be any string, and can also contain spaces and non-alpha-numeric characters such as exclamation points (!), percent signs (%), at signs(@), dot signs (.), underscore signs (_), minus signs (-), and asterisks (*). If the string contains spaces or non-alphanumeric characters, it must be enclosed in single or double quotes.
`<login_name>`	An optional, case-insensitive parameter to specify the name of the login to link the user with, used with the `SET` option. This cannot be used in conjunction with the `SERVICE_ACCOUNT` parameter - a user can be linked to a login OR a service account but not both. `DEFAULT` disassociates the user from its login. The user will become unusable before it’s re-associated with some login or service account.
`<service_account_name>`	An optional parameter to specify the name of the service account to link the user with, used with the `SET` option. This cannot be used in conjunction with the `LOGIN` parameter - a user can be linked to a login OR a service account but not both. `DEFAULT` disassociates the user from its service account. The user will become unusable before it’s re-associated with some login or service account.
`<database_name>`	An optional parameter to define a default database for the user. Used with the `SET` option.
`<engine_name>`	An optional parameter to define a default engine for the user. Used with the `SET` option.

Example

The following command will rename the “alex” account to “alexs”.

ALTER USER "alex" RENAME TO "alexs";

This command will link the user “alex” to the “alexs@acme.com” login.

ALTER USER alex SET LOGIN="alexs@acme.com";

ALTER USER PASSWORD_LOGIN

When authentication is enabled, PASSWORD_LOGIN controls whether a user can authenticate with a password. Without OIDC, users created with a password receive this capability by default, but the SQL toggle is still available. Disabling it blocks their password login. An account admin with permission to modify the target user can enable or disable the capability. Owning your own user record or having permission to modify another user does not remove the account-admin requirement.

ALTER USER <user_name> ENABLE PASSWORD_LOGIN;
ALTER USER <user_name> DISABLE PASSWORD_LOGIN;

ALTER USER OWNER TO

Change the owner of a user. The current owner of a user can be viewed in the information_schema.users view on user_owner column. Check ownership page for more info.

Syntax

ALTER USER [IF EXISTS] <user_name> OWNER TO <user>

Parameters

Parameter	Description
`<user_name>`	The name of the user to change the owner of.
`<user>`	The new owner of the user. Can be either a user name or a role name.

Overview

Performance and Observability

Security

Self-Managed

Managed service

Guides

SQL reference

Release notes

API reference

Legal

ALTER USER SET

Syntax

Parameters

Example

ALTER USER PASSWORD_LOGIN

ALTER USER OWNER TO

Syntax

Parameters

​ALTER USER SET

​Syntax

​Parameters

​Example

​ALTER USER PASSWORD_LOGIN

​ALTER USER OWNER TO

​Syntax

​Parameters

ALTER USER SET

Syntax

Parameters

Example

ALTER USER PASSWORD_LOGIN

ALTER USER OWNER TO

Syntax

Parameters