System administrators and system security officers can:
Use |
To |
|---|---|
create login |
Specify the expiration interval for a login password at creation. |
alter login |
Change the expiration interval for a login password. |
create role |
Specify the expiration interval for a role password at creation (only the system security officer can issue create role). |
alter role |
Change the expiration interval for a role password (only the system security officer can issue alter role). |
These rules apply to password expiration for logins and roles:
A password expiration interval assigned to individual login accounts or roles overrides the global password expiration value. This allows you to specify shorter expiration intervals for sensitive accounts or roles, such as system security officer passwords, and more relaxed intervals for less sensitive accounts such as an anonymous login.
A login or role for which the password has expired is not directly activated.
The password expires at the time of day when the password was last changed after the number of days specified by password expiration interval has passed.
For details on the syntax and rules for the commands and system procedures, see the appropriate Reference Manual.
