Apart from sap hana user password expiring date, it is possible to allow a user connection accessibility until a specific date and time.
This is particularly useful for temporary users coming to work on sensitive projects. Temporary administrators or temporary developers could be managed automatically via this option.
A project duration would dictate until when a person is allowed to connect to the system.
This option would be used whenever an external consultant is coming to work on a short term basis.
Specific technical user names should be created so that, apart from new privilege group assignment, connection end date could be renewed as needed.
This way, new sap hana user accounts do not have to be created each time new persons join a development team.
Ex: For a temporary technical developer user, (for ex: USR_DEV_TMP)
It is a simple task. A/ Reactivate the user account. B/ Assign to the user a new connection time limit and a new password. C/ Give connection details (technical user account name and password) to the new person.
ALTER USER < user_name > VALID FROM NOW UNTIL '2025-05-02 18:00:00'
ALTER USER < user_name > VALID FROM < timestamp > UNTIL < timestamp >
ALTER USER < user_name > VALID FROM < timestamp > VALID UNTIL FOREVER
-- ------------------ examples
-- From an SQL console
-- create a temporary and a developer user
CREATE USER USR_DEV PASSWORD VeryTemp01 NO FORCE_FIRST_PASSWORD_CHANGE VALID UNTIL '2024/12/31';
CREATE USER USR_TMP VeryTemp01 NO FORCE_FIRST_PASSWORD_CHANGE VALID UNTIL '2024/12/31';
-- Assign to the developer a connection validity period linked to a development project duration
ALTER USER USR_DEV VALID FROM NOW UNTIL '2021/12/31 12:30:00';
ALTER USER USR_TMP VALID FROM '2021/01/01 08:30:00' UNTIL '2021/01/01 19:30:00';
-- Renew connection validation date for a temporary administrator
CREATE USER USR_TMP_ADMIN PASSWORD VeryTemp01 NO FORCE_FIRST_PASSWORD_CHANGE VALID UNTIL '2022/12/31';