Loading Data



















The interactions in this eCourse require Javascript to be enabled.





 

Understanding Schemas, Roles and Privileges


previous|next







Users need privileges to access objects in Oracle Database XE. The minimum privileges that users need are the connect and session privileges. In addition, they need system privileges that allow them to create objects. After users have created objects, they can grant privileges on their objects to other users. A group of privileges is called a role.

User privileges






User privileges:
Object privileges are privileges granted on specific objects within a schema to other schemas.
Column privileges are column privileges granted on specific columns within a schema to other schemas. These are INSERT, UPDATE , and REFERENCES privileges on specific columns in a table.








Role privileges






Roles are collections of various privileges. Role privileges are privileges granted to a user through roles. Privileges can be granted to roles, and roles can in turn be granted to other roles or to users. For example, all DBA users can be granted the DBA role.






System privileges






System privileges are granted to enable users to create schema objects in their schema or in other schemas.


A system privilege is the right to perform a particular action, or to perform an action on any schema objects of a particular type. For example, the privileges to create tablespaces and to delete the rows of any table in a database are system privileges.









Privileges are granted by using the GRANT command. If a system privilege is granted with ADMIN OPTION, then it can be passed on by the grantee. If an object privilege is granted with GRANT OPTION, then it can be passed on.
Oracle Database XE allows Sheila to view security reports with the Utilities interface.


Security reports enable Sheila to see privileges granted on database objects owned by other schemas. She can also use these reports to view database roles and system privileges grants.