reset_database_user_password
Reset a database user's password in SAP Datasphere after forgotten/compromised credentials. Generates a temporary password that must be changed on next login.
Instructions
Reset the password for an existing database user in SAP Datasphere.
IMPORTANT: This is a HIGH-RISK tool that requires user consent before execution.
Use this tool when:
User requests "Reset password for database user JEFF"
Password forgotten or compromised
Regular password rotation policy
Account locked due to failed login attempts
What happens:
Old password is invalidated immediately
New password is auto-generated securely
User must change password on next login
Action is logged for security audit
Required parameters:
space_id: The space containing the database user
database_user_id: The user whose password needs reset
Security considerations:
New password shown only once - save securely!
Recommend using output_file to save credentials
Notify user through secure channel
Enforce password change on first login
All active sessions are terminated
Example queries:
"Reset password for JEFF in SALES space"
"Generate new password for database user ANALYST"
"REPORTING_USER password expired, reset it"
Best practices:
Always save output to secure file
Communicate new password via secure channel (not email!)
Verify user identity before resetting
Document password reset in change log
Note: Corresponds to CLI: datasphere dbusers password reset --space --databaseuser
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| space_id | Yes | The space ID containing the database user (e.g., 'SALES', 'FINANCE'). Must be uppercase. | |
| output_file | No | Optional: Path to save new credentials JSON (e.g., 'jeff_new.json'). HIGHLY RECOMMENDED for security! | |
| database_user_id | Yes | Database user name suffix whose password will be reset (e.g., 'JEFF', 'ANALYST'). |