Authorization for CONNECT, RESOURCE, and DBA in ORACLE, oracledba

Authorization for CONNECT, RESOURCE, and DBA in ORACLE, oracledba

CONNECT, RESOURCE, and DBA are the three built-in roles of the ORACLE system. The role permissions are as follows:

CONNECT: users with the Connect permission can only log on to ORACLE, create entities, and create database structures.

RESOURCE: users with Resource permissions can only create entities, but cannot create database structures.

DBA: it has all the privileges and is the highest system permission. only DBA can create a database structure.

Generally, CONNECT and RESOURCE permissions are granted to common users. For administrator users, CONNECT, RESOURCE, and DBA permissions are granted.

Syntax of the role:

    grant <object/system privilege> to <role name>;

View the number of permissions of all roles:

    select role, count(*) from role_sys_privs group by role;

View the permissions of a role (such as RESOURCE:

    select grantee,privilege from dba_sys_privs where grantee='RESOURCE' order by privilege;

You can see through the query that only one permission in the CONNECT role is "create session ":

The permissions of the DBA role also include: