Required to manage users.
The MANAGE ANY USER system privilege allows a user to:
- Issue CREATE, ALTER, or DROP statement on database users (including assigning
initial password)
- Define authentication mechanisms for users (Kerberos, Integrated login)
- Issue CREATE or DROP statement on external logins
- Force password change on next login for any user
- Assign a login policy to any user
- Reset the login policy of any user
- Issue COMMENT statement on users, integrated logins, or Kerberos logins.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or
WITH ADMIN ONLY OPTION clause. If you do not specify a clause, the WITH NO ADMIN OPTION
clause is used by default.