Blogger tested on Oracle 11g R2 (test date: 2017.10.30):
Log in to Oracle with SYS and execute the following two statements:
Select * from WHERE like ' CONNECT '; -- Querying permissions for the Connect role Select * from WHERE like ' RESOURCE '; -- querying permissions for resource roles
Connect role:--is the typical right to grant the end user, the most basic
Create session--Set up sessions
Resource role:--is granted to developers
Create CLUSTER--Build a cluster
Create PROCEDURE--build process
Create SEQUENCE-Create sequence
CREATE table--Build tables
Create TRIGGER--Create a trigger
Create type--build types
Create OPERATOR--Creating a user
Create Indextype--Creating an index type
CREATE table--Creating tables
So, if you are simply querying users, you can only authorize the connect role.
Oracle Grant Connect, permissions in the resource to user statement