> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kinetica.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ALTER CREDENTIAL

<a id="sql-alter-credential" />

Alters the properties of an existing
[credential](/content/sql/ddl/create-credential#sql-create-credential).

```sql title="ALTER CREDENTIAL Syntax" theme={null}
ALTER CREDENTIAL [<schema name>.]<credential name>
SET PROPERTY
    <property name> = '<property value>'[,...]
```

Only users with `system_admin` or `system_user_admin`, or users with
`credential_admin` on the *credential*, may alter it.

## Parameters

<AccordionGroup>
  <Accordion title="<schema name>" id="<schema-name>" defaultOpen>
    Name of the *schema* containing the *credential* to alter
  </Accordion>

  <Accordion title="<credential name>" id="<credential-name>" defaultOpen>
    Name of the existing *credential* to alter.
  </Accordion>

  <Accordion title="SET PROPERTY" id="set-property" defaultOpen>
    Indicator that a comma-delimited list of property name/value assignments will follow. See
    [Set Properties](/content/sql/ddl/alter-credential#sql-alter-credential-prop) and [Options](/content/sql/ddl/create-credential#sql-credential-opts) for the
    complete list of properties.
  </Accordion>
</AccordionGroup>

## Examples

To alter a *credential*, `auser_azure_active_dir_creds`, updating the secret:

```sql ALTER CREDENTIAL Example theme={null}
ALTER CREDENTIAL auser_azure_active_dir_creds
SET PROPERTY
    SECRET = 'atypicaluserNewPassw0rd!'
```

To alter a *credential*, `kafka_cred`, updating the keystore password:

```sql ALTER CREDENTIAL WITH OPTIONS Example theme={null}
ALTER CREDENTIAL kafka_cred
SET PROPERTY
    'ssl.key.password' = 'Passw0rd!?'
```

<a id="sql-alter-credential-prop" />

## Set Properties

All *credential* properties can be altered via
[ALTER CREDENTIAL](/content/sql/ddl/alter-credential#sql-alter-credential). The following are the property names and
descriptions to use when performing an alteration.

<AccordionGroup>
  <Accordion title="TYPE" id="type" defaultOpen>
    The type of *credential*. Supported types include:

    <div>
      <table class="table w-full [&_td]:min-w-[150px] [&_th]:text-left [&_td[data-numeric]]:tabular-nums">
        <thead>
          <tr>
            <th>Type</th>
            <th>Description</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <td><code>aws\_access\_key</code></td>
            <td>Authenticate to *Amazon Web Services (AWS)* via *Access Key*</td>
          </tr>

          <tr>
            <td><code>aws\_iam\_role</code></td>
            <td>Authenticate to *Amazon Web Services (AWS)* via *IAM Role*</td>
          </tr>

          <tr>
            <td><code>azure\_ad</code></td>
            <td>Authenticate to *Microsoft Azure* via *Active Directory*</td>
          </tr>

          <tr>
            <td><code>azure\_sas</code></td>
            <td>Authenticate to *Microsoft Azure* via *Shared Access Signature (SAS)*</td>
          </tr>

          <tr>
            <td><code>azure\_storage\_key</code></td>
            <td>Authenticate to *Microsoft Azure* via *Storage Key*</td>
          </tr>

          <tr>
            <td><code>confluent</code></td>
            <td>Authenticate to a *Confluent Kafka* cluster or schema registry</td>
          </tr>

          <tr>
            <td><code>docker</code></td>
            <td>Authenticate to a *Docker* repository</td>
          </tr>

          <tr>
            <td><code>gcs\_service\_account\_id</code></td>
            <td>Authenticate to *Google Cloud* via user ID & private key</td>
          </tr>

          <tr>
            <td><code>gcs\_service\_account\_keys</code></td>
            <td>Authenticate to *Google Cloud* via *JSON key*</td>
          </tr>

          <tr>
            <td><code>hdfs</code></td>
            <td>Authenticate to *HDFS*</td>
          </tr>

          <tr>
            <td><code>jdbc</code></td>
            <td>Authenticate via *Java Database Connectivity*</td>
          </tr>

          <tr>
            <td><code>kafka</code></td>
            <td>Authenticate to a *Kafka* cluster or schema registry</td>
          </tr>

          <tr>
            <td><code>nvidia\_api\_key</code></td>
            <td>Authenticate to the *Nvidia AI* API</td>
          </tr>

          <tr>
            <td><code>openai\_api\_key</code></td>
            <td>Authenticate to the *OpenAI* API</td>
          </tr>
        </tbody>
      </table>
    </div>
  </Accordion>

  <Accordion title="IDENTITY" id="identity" defaultOpen>
    Username to use for authenticating with the *credential*.
  </Accordion>

  <Accordion title="SECRET" id="secret" defaultOpen>
    Password to use for authenticating with the *credential*.
  </Accordion>

  <Accordion title="'<option>'" id="<option>" defaultOpen>
    Any option/value pair from the [credential options](/content/sql/ddl/create-credential#sql-credential-opts) list.
  </Accordion>
</AccordionGroup>