reset_database_user_password
Reset a database user's password in SAP Datasphere: generates a new secure password, invalidates the old one, terminates all sessions, and enforces password change on next login. Requires user consent.
Instructions
Reset the password for an existing database user in SAP Datasphere.
IMPORTANT: This is a HIGH-RISK tool that requires user consent before execution.
Use this tool when:
User requests "Reset password for database user JEFF"
Password forgotten or compromised
Regular password rotation policy
Account locked due to failed login attempts
What happens:
Old password is invalidated immediately
New password is auto-generated securely
User must change password on next login
Action is logged for security audit
Required parameters:
space_id: The space containing the database user
database_user_id: The user whose password needs reset
Security considerations:
New password shown only once - save securely!
Recommend using output_file to save credentials
Notify user through secure channel
Enforce password change on first login
All active sessions are terminated
Example queries:
"Reset password for JEFF in SALES space"
"Generate new password for database user ANALYST"
"REPORTING_USER password expired, reset it"
Best practices:
Always save output to secure file
Communicate new password via secure channel (not email!)
Verify user identity before resetting
Document password reset in change log
Note: Corresponds to CLI: datasphere dbusers password reset --space --databaseuser
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| space_id | Yes | The space ID containing the database user (e.g., 'SALES', 'FINANCE'). Must be uppercase. | |
| output_file | No | Optional: Path to save new credentials JSON (e.g., 'jeff_new.json'). HIGHLY RECOMMENDED for security! | |
| database_user_id | Yes | Database user name suffix whose password will be reset (e.g., 'JEFF', 'ANALYST'). |