User Auth Providers

modules/ROOT/pages/authentication-authorization/manage-users.adoc

@@ -793,7 +793,8 @@ With `ENCRYPTED`, the password string is expected to be in the format of `<encry
 If the optional `SET PASSWORD CHANGE [NOT] REQUIRED` is omitted but a password is given, the default is `CHANGE REQUIRED`.
 The `SET PASSWORD` prefix of the `CHANGE [NOT] REQUIRED` clause is only optional if it directly follows the `SET PASSWORD 'password'` clause and is not part of a `SET AUTH` clause.
 
-<4> The default for `SET STATUS` is `ACTIVE`.
+<4>  Specifies the user's status.
+If not set, the default is `ACTIVE`.
 
 <5> Specifies a home database for a user.
 A home database is resolved if it is pointing to a database or a database alias.
@@ -984,6 +985,7 @@ You can modify users with the `ALTER USER` command.
 The command allows you to change the user's password, status, home database, and auth provider settings.
 The `SET` and `REMOVE` clauses can be applied in any order.
 However, all `REMOVE` clauses must come before the first `SET` clause and at least one `SET` or `REMOVE` clause is required for the command.
+If any of the `SET` or `REMOVE` clauses are omitted, the corresponding settings will not be changed.
 
 [source, syntax, role="noheader"]
 ----
@@ -1015,9 +1017,10 @@ With `ENCRYPTED`, the password string is expected to be in the format of `<encry
 ** `0` is the first version and refers to the `SHA-256` cryptographic hash function with iterations `1`.
 ** `1` is the second version and refers to the `SHA-256` cryptographic hash function with iterations `1024`.
 <5> Specifies whether the user must change their password at the next login.
-If the optional `SET PASSWORD CHANGE [NOT] REQUIRED` is omitted, the default is `CHANGE REQUIRED`.
+If the optional `SET PASSWORD CHANGE [NOT] REQUIRED` is omitted when adding native auth to a user (either by first removing pre-existing native auth or if the user does not have native auth to start with), the default is `CHANGE REQUIRED`.
 The `SET PASSWORD` prefix of the `CHANGE [NOT] REQUIRED` clause is only optional if it directly follows the `SET PASSWORD 'password'` clause and is not part of a `SET AUTH` clause.
-<6> The default for `SET STATUS` is `ACTIVE`.
+<6> Specifies the user's status.
+The default is `ACTIVE`.
 <7> Specifies a home database for a user. A home database is resolved if it is pointing to a database or a database alias. If no home database is set, the DBMS default database is used as the home database for that user.
 
 <8> label:new[Introduced in 5.24] One or more `SET AUTH` clauses can be used to set xref:authentication-authorization/auth-providers.adoc[auth providers], which define authentication / authorization providers for that user.