Creating a user-defined role (SQL)

Create a role and grant privileges and roles to it.

Prerequisites

You must have the MANAGE ROLES system privilege.

The name you assign to the new role cannot begin with the prefix SYS_ and end with the suffix _ROLE. For example, SYS_MyBackup_ROLE cannot be the name of a user-defined role.

Context and remarks

You can also convert an existing user into a user-extended role, and then grant the user-extended role to other users.

Task

Connect to the database.
Execute a CREATE ROLE statement. For example:
CREATE ROLE role-name
Grant system privileges and roles to the new role using the GRANT statement.

Results

The new role is created.

Next

Grant system privileges to this role and grant this role to other users.

Example

The following statement creates a role called Sales. Because no administrator was specified, global administrators (users with the MANAGE ROLES system privilege) can administrator the role.

CREATE ROLE Sales;
GRANT SELECT, UPDATE ON GROUPO.SalesOrders TO Sales;
GRANT SELECT, UPDATE ON GROUPO.SalesOrderItems TO Sales;

Creating a user-defined role (SQL)

Task

See also