delete_database_user
Permanently delete a database user from a SAP Datasphere space. This action removes the user and all associated permissions irreversibly.
Instructions
Delete a database user from a SAP Datasphere space.
IMPORTANT: This is a HIGH-RISK tool that requires user consent before execution. WARNING: This action is IRREVERSIBLE. User and all associated permissions are permanently deleted.
Use this tool when:
User explicitly requests "Delete database user JEFF from SALES"
Decommissioning user accounts
Removing unauthorized access
Cleaning up test/temporary users
User left organization
What happens:
User account is permanently deleted
All active sessions terminated immediately
All granted privileges revoked
Cannot be undone - must recreate if needed
Deletion is logged for audit
Required parameters:
space_id: The space containing the database user
database_user_id: The user to delete
force: Optional flag to skip confirmation dialog
Safety considerations:
PERMANENT deletion - no recovery possible
Verify user identity and authorization
Check if user owns any objects (may cause errors)
Document reason for deletion
Consider deactivating instead of deleting
Before deleting:
List user's current permissions (list_database_users)
Verify no applications depend on this user
Check if user owns database objects
Get management approval for production users
Document deletion in change log
Example queries:
"Delete database user JEFF from SALES space"
"Remove TEMP_USER from FINANCE"
"Delete TEST_ANALYST - no longer needed"
Best practices:
Always confirm with user before deleting
Use force=false for interactive confirmation
Keep audit trail of deletions
For temporary removal, consider update instead
Note: Corresponds to CLI: datasphere dbusers delete --space --databaseuser [--force]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| space_id | Yes | The space ID containing the database user (e.g., 'SALES', 'FINANCE'). Must be uppercase. | |
| database_user_id | Yes | Database user name suffix to delete (e.g., 'JEFF', 'TEMP_USER'). WILL BE PERMANENTLY DELETED. | |
| force | No | Skip confirmation dialog. Default: false (ask for confirmation). Set true only if user explicitly confirmed deletion. |