Neoview User Management and Security Administration Guide (R2.5)

The following command registers a locally authenticated user, whether or not an external directory
server is configured. NCI will prompt for a password:
.sec create database user maryjosephs local, role ROLE.DBA, password;
The following command creates an account for an HP Support person to log on with
SUPER.SERVICES privileges and requires NCI to prompt for the password, which remains valid
for 90 days. This example omits .sec because NCI was already in security mode, as described in
“Security Mode” (page 29):
create platform user kumiko.ishida-hpsup, password, role SUPER.SERVICES, expiry-days 90
The following command creates an account for a user with the name xygate-services to log on
with SUPER.SERVICES privileges. It requires NCI to prompt for the password, which remains
valid for 20 days after a change and which expires on October 22, 2009:
.sec create platform user xygate-services, password, role super.services, expiry-days 20, expiry-date "oct 22
2009";
DROP ROLE Command (database roles)
The DROP ROLE command deletes an existing role from the Neoview platform. The only
predefined role you can delete is ROLE.USER.
Syntax
[.SEC] DROP ROLE [rolename]
Parameters
rolename
A string consisting of the prefix “ROLE.” followed by 1 to 8 alphanumeric characters, the
first of which may not be a number. Alphabetic characters are case-insensitive.
Error Conditions
If the command is successful, a message is displayed indicating that the role was dropped. The
command returns an error in any of the following cases:
• The user executing the command is logged on in a role other than ROLE.MGR.
• The role parameter does not specify an existing role.
• The role name is invalid (the prefix is missing, or the part following the prefix has more
than 8 characters, doesn't start with a letter, or contains characters other than letters and
digits).
• The specified role is ROLE.DBA, ROLE.MGR, or ROLE.SECMGR or a platform role.
• One or more users currently have the role assigned to them.
• The role has been granted privileges in relation to one or more database objects.
Example
DROP ROLE ROLE.ITDBA
DROP USER Command (platform users, database users)
The DROP USER command drops a database or platform user from the Neoview platform,
revoking the user's role or roles. This command does not delete a remotely authenticated database
user from the LDAP server.
A user logged on in the role ROLE.MGR may delete any database user, including a user who
has the role ROLE.SECMGR.
User Management Commands 117