Authorization for CONNECT, RESOURCE, and DBA in ORACLE
CONNECT, RESOURCE, and DBA are the three built-in roles of the ORACLE system. The role permissions are as follows:
CONNECT: users with the Connect permission can only log on to ORACLE, create entities, and create database structures.
RESOURCE: users with Resource permissions can only create entities, but cannot create database structures.
DBA: it has all the privileges and is the highest system permission. only DBA can create a database structure.
Generally, CONNECT and RESOURCE permissions are granted to common users. For administrator users, CONNECT, RESOURCE, and DBA permissions are granted.
Syntax of the role:
grant <object/system privilege> to <role name>;
View the number of permissions of all roles:
select role, count(*) from role_sys_privs group by role;
View the permissions of a role (such as RESOURCE:
select grantee,privilege from dba_sys_privs where grantee='RESOURCE' order by privilege;
You can see through the query that only one permission in the CONNECT role is "create session ":
The permissions of the DBA role also include:
<喎?http: www.bkjia.com kf ware vc " target="_blank" class="keylink"> VcD4KICAgIDxpbWcgc3JjPQ = "http://www.2cto.com/uploadfile/Collfiles/20150324/2015032410092451.jpg" alt = "">