Super-users are users that can exercise any system privilege and administer any role; they can perform any privileged operation in the system. When a new database is created, the default user created ("DBA") is the super-user, with full administrative rights. User DBA can perform any privileged operation in a newly created database. However, when a new role is created, if a role administrator was specified at creation time, then user DBA will not be able to administer the role by default. You will have to remember to grant the role to DBA with administrative rights. Additionally, you can delete the DBA user and create your own super-user.

To create a super-user, create a user and grant the SYS_AUTH_DBA_ROLE compatibility role to them. If you migrated SYS_AUTH_DBA_ROLE, you must manually grant the super-user the roles and privileges (with administration rights) you want the user to have. Going forward, you must remember to grant all new roles to the super-user, with administration rights.

 See also