Oracle Conncect role vs Create Session

Oracle Conncect role vs Create Session

The CONNECT role is introduced with Oracledatabase version 7, which added new and robust support for database roles. Theconnect role is used in sample code, applications, documentation, and Technicalpapers. The CONNECT role is established with the following privileges:

Privileges originally associated with the CONNECT Role

Alter Session Create Session

Create Cluster create synonym

Create Database Link Create Table

Create Sequence Create View

However, beginning in Oracle Database 10gRelease 2 (10.2), the CONNECT role have only the CREATE SESSION privilege, all Other privileges is removed.

DBA: has full privileges, is the highest system privilege, and only the DBA can create the database structure.
RESOURCE: a user with RESOURCE permission can only create entities and cannot create a database structure.
Connect: A user with connect permission can only log in to the database, cannot create an entity, and cannot create a database structure.
for normal users: Grant Connect, resource permissions.
for DBA Admin User: Grant connect,resource, dba authority.

sql> select * from role_sys_privs where role =  ' CONNECT '; role                            PRIVILEGE                                  adm------------------------------ ----------------------- ----------------- ---connect                         CREATE SESSION                             NOSQL> select * from v$version; BANNER--------------------------------------------------------------------------------oracle database 11g enterprise edition release  11.2.0.4.0 - 64bit productionpl/sql release 11.2.0.4.0 - productioncore     11.2.0.4.0      ProductionTNS for Linux:  Version 11.2.0.4.0 - productionnlsrtl version 11.2.0.4.0 - production

This article is from the "90SirDB" blog, be sure to keep this source http://90sirdb.blog.51cto.com/8713279/1931443

Oracle Conncect role vs Create Session