Mega Code Archive
Oracle System Privilege Grants to Roles
<![CDATA[
SQL>
SQL> SELECT privilege what_granted,
2 admin_option, grantee
3 FROM sys.dba_sys_privs
4 WHERE NOT EXISTS
5 (SELECT 'x'
6 FROM sys.dba_users
7 WHERE username = grantee)
8 and rownum < 50
9 ORDER BY 1,2;
WHAT_GRANTED ADM GRANTEE
---------------------------------------- --- ------------------------------
ADMINISTER ANY SQL TUNING SET YES DBA
ALTER ANY INDEXTYPE YES DBA
ALTER ANY LIBRARY YES DBA
ALTER ANY PROCEDURE YES DBA
ALTER ANY RULE SET YES DBA
ALTER ANY SQL PROFILE YES DBA
ALTER DATABASE YES DBA
ALTER PROFILE YES DBA
ALTER ROLLBACK SEGMENT YES DBA
ALTER SESSION YES DBA
BECOME USER NO IMP_FULL_DATABASE
WHAT_GRANTED ADM GRANTEE
---------------------------------------- --- ------------------------------
BECOME USER YES DBA
CHANGE NOTIFICATION YES DBA
CREATE ANY DIRECTORY YES DBA
CREATE ANY JOB YES SCHEDULER_ADMIN
CREATE ANY LIBRARY YES DBA
CREATE ANY MATERIALIZED VIEW NO IMP_FULL_DATABASE
CREATE ANY SYNONYM NO IMP_FULL_DATABASE
CREATE DIMENSION YES DBA
CREATE JOB NO OEM_ADVISOR
CREATE ROLE YES DBA
CREATE RULE YES DBA
WHAT_GRANTED ADM GRANTEE
---------------------------------------- --- ------------------------------
CREATE RULE SET YES DBA
CREATE SESSION YES DBA
CREATE SYNONYM NO RECOVERY_CATALOG_OWNER
DEBUG ANY PROCEDURE YES DBA
DELETE ANY TABLE YES DBA
DEQUEUE ANY QUEUE YES DBA
DROP ANY INDEX YES DBA
DROP ANY INDEXTYPE YES DBA
DROP ANY LIBRARY NO IMP_FULL_DATABASE
DROP ANY MATERIALIZED VIEW YES DBA
DROP ANY TRIGGER NO IMP_FULL_DATABASE
WHAT_GRANTED ADM GRANTEE
---------------------------------------- --- ------------------------------
DROP ANY TRIGGER YES DBA
DROP ROLLBACK SEGMENT YES DBA
DROP TABLESPACE YES DBA
EXECUTE ANY EVALUATION CONTEXT YES DBA
EXECUTE ANY LIBRARY YES DBA
EXECUTE ANY PROCEDURE NO IMP_FULL_DATABASE
EXECUTE ANY PROCEDURE YES DBA
EXPORT FULL DATABASE YES DBA
FORCE ANY TRANSACTION YES DBA
INSERT ANY TABLE YES DBA
MANAGE ANY QUEUE NO OEM_MONITOR
WHAT_GRANTED ADM GRANTEE
---------------------------------------- --- ------------------------------
READ ANY FILE GROUP NO EXP_FULL_DATABASE
SELECT ANY SEQUENCE YES DBA
SELECT ANY TABLE YES DBA
UNDER ANY TYPE YES DBA
UPDATE ANY TABLE YES DBA
49 rows selected.
SQL>
]]>