Re: Default Roles vs Granted Roles

A default role is the role(s) that is / are invoke when you log onto the database. Granted roles are all default roles and other roles that must be explicitedly invoked.

See the set role(?) command. Or is it alter session invoke role?

Specifically see below.

bmk_at_wdl.lmco.com (Bruce M Krawetz) wrote:

>Hello

>What is the difference between default roles (those done by "ALTER USER")
>and roles granted to a user (those done by GRANT role TO user)?

No difference but you would have to grant the role to user before you could alter user default role role.

>Is it a matter of permissions? (i.e. someone can ALTER USER, but
>cannot GRANT).

Maybe, if some did not have grant any role, they couldn't grant the role. If you have alter user privilege, you could.

>Can an ALTER USER ever have WITH ADMIN OPTION?

No, you would regrant the role with admin option.

>Can a default role be REVOKED (or can it only be done via another ALTER USER)?

Yes, it is the only way.

>Or is the ALTER USER a legacy command?

No

>enQUERYing mind want to know!
 

>--
>------------------------------------------- bmk_at_wdl.lmco.com
>We must learn from our mistakes, so we can make bigger and better ones.
Received on Thu Oct 29 1998 - 00:00:00 CST