Required to manage users.
The MANAGE ANY USER system privilege allows a user to:
- Issue CREATE, ALTER, or DROP statements on database users
(including assigning initial password)
- Define authentication mechanisms for users (Kerberos, Integrated login)
- Issue CREATE or DROP statements on external logins
- Force password change on next login for any user
- Assign a login policy to any user
- Reset the login policy of any user
- Issue the COMMENT statement on users, integrated logins, or
Kerberos logins
Grant this system privilege using the WITH ADMIN OPTION, WITH NO
ADMIN OPTION, or WITH ADMIN ONLY OPTION clause. If you do not specify a clause, the
default is WITH NO ADMIN OPTION.