Difference between with grant option and with admin Option

With grant option: permissions are revoked in revoke cascade.

With admin option: permissions are not revoked in revoke cascade.

 

Reprinted on http://blog.chinaunix.net/u2/75347/showart_1129674.html

 

Similarities:
-Both can be used only when user permission is granted or when role is granted.
Grant create session to EMI with admin option;
Grant create session to role with admin option;
Grant role1 to role2 with admin option;
Grant select on customers1 to Bob with grant option;
Grant select on customers1 to hr_manager (role) with grant option;

-Both granted users can grant the permission or role to the other users.
-Both options can be set to DBA and app admin.ManagementIt brings convenience, but at the same time, it also brings insecure factors.

Differences:
-With admin option can only be used when system privilege is assigned.
-With grant option can only be used when the object is given privilege
-When you cancel system privileges with the admin option, the associated permissions are retained.
For example:
1. DBA gave createTableSystem permission to Jeff with admin Option
2. Jeff Creates table
3. Jeff grants the create table system permission to Emi
4. Emi creates a table
5. DBA revokes the create table system permission from Jeff
Result:
Jeff's table still exists, but it cannot be created.
The EMI's table still exists and retains the create table system permission.
-When you revoke the object privileges with the grant option, the associated permissions are also revoked.
For example:
1. Jeff gave select object privileges on EMP with admin Option
2. Jeff gave select permission on EMP to Emi
3. Later, Jeff's select permission was revoked.

Result:
The permission for EMI is also revoked.