Thursday, April 19, 2007

Oracle9i DBA -- Database: Fundamentals I (18)

Managing Roles


  • Role Privileges include the following : Create Role, Alter Any Role, Drop Any Role, Grant Any Role
  • The SET ROLE command will turn off any other roles granted to the user.
  • You can’t assign a role to a user within a CREATE USER statement.
  • Max_Enabled_roles allow the user to limit the maximum number of database roles that the user can enable.
  • Default role is granted through alter user. Set role is use for enabling or disabling a role.
  • SET ROLE NONE is to turn off all roles granted to the user including default role. Drop role is drop the role and not disable it. Revoke role is used to revoke the role from the user and not just disable it.
  • The CREATE DATABASE , ALTER TABLESPACE privilege is SYSDBA privilege

Read more!

No comments: