Try variations of this command: data-source --name=ExampleDS --new-connection-sql="set role test identified by \"password\"" The intention is to use double quotes around the password as this is needed when the password contains special characters. Several variations simply get refused, at best the xml ends up like: <new-connection-sql>set role test identified by password""</new-connection-sql> => two double quotes AFTER the password. It is assumed this will happen in other places where the syntax is similar.