A user-defined role is a custom collection of system privileges, object-level privileges, and roles, typically created to group privileges related to a specific task or set of tasks. You can create user-defined roles to suit the needs of your organization.

User-defined roles can own objects.

When a user-defined role is granted with administrative rights, a user can manage (grant, revoke, and drop) the role, as well as use any of the underlying system privileges of the role. When granted with administrative rights only, a user can manage the role, but cannot use its underlying system privileges. When granted with no administrative rights, a user can only use its underlying system privileges.

One special form of user-defined role is the user-extended role. This is a user who has been extended to become a role, which can be granted to others.

 See also