Privilege types in Oracle mode|V4.1.0| docs|Distributed Database

Privilege types in Oracle mode

Last Updated：2023-08-04 08:22:14 Updated

This topic describes the privilege types supported by OceanBase Database in Oracle mode.

OceanBase Database supports the following two types of privileges in Oracle mode:

Object privileges: the privileges to operate on specific objects, such as the ALTER, SELECT, and UPDATE privileges on a table.
System privileges: the privileges that allow users to perform specific database operations on one or all schemas.

Note:

System privileges provide much broader permissions than object privileges.

The following table lists the privileges supported by OceanBase Database in Oracle mode.

Type	Privilege	Description
Object privileges	ALTER	The privilege to modify schemas.
Object privileges	INSERT	The privilege to insert data into tables and views.
Object privileges	UPDATE	The privilege to modify data in tables and views.
Object privileges	DELETE	The privilege to delete data from tables and views.
Object privileges	SELECT	The privilege to use tables, views, synonyms, and sequences.
Object privileges	INDEX	The privilege to add indexes to tables.
Object privileges	REFERENCE	The privilege to reference tables.
Object privileges	EXECUTE	The privilege to execute stored procedures, functions, and system packages.
Object privileges	DEBUG	The privilege to debug procedures.
Object privileges	READ	The read privilege.
Object privileges	WRITE	The write privilege.
System privileges	CREATE SESSION	The privilege to create sessions.
System privileges	CREATE TABLE	The privilege to create tables.
System privileges	CREATE ANY TABLE	The privilege to create any tables.
System privileges	ALTER ANY TABLE	The privilege to modify any tables.
System privileges	DELETE ANY TABLE	The privilege to delete data from any tables.
System privileges	DROP ANY TABLE	The privilege to drop any tables.
System privileges	BACKUP ANY TABLE	The privilege to back up any tables.
System privileges	LOCK ANY TABLE	The privilege to lock any tables.
System privileges	COMMENT ANY TABLE	The privilege to add comments to any tables.
System privileges	INSERT ANY TABLE	The privilege to insert rows into any tables.
System privileges	SELECT ANY TABLE	The privilege to use any tables.
System privileges	FLASHBACK ANY TABLE	The privilege to flash back any tables.
System privileges	UPDATE ANY TABLE	The privilege to modify rows of any tables.
System privileges	CREATE ROLE	The privilege to create a role.
System privileges	DROP ANY ROLE	The privilege to drop any role.
System privileges	GRANT ANY ROLE	The privilege to grant any role.
System privileges	ALTER ANY ROLE	The privilege to modify any role.
System privileges	AUDIT ANY	The privilege to set audit options for any objects.
System privileges	GRANT ANY PRIVILEGE	The privilege to grant any system privileges to users.
System privileges	GRANT ANY OBJECT PRIVILEGE	The privilege to grant any object privileges to users.
System privileges	CREATE ANY INDEX	The privilege to create any indexes.
System privileges	ALTER ANY INDEX	The privilege to modify any indexes.
System privileges	DROP ANY INDEX	The privilege to delete any indexes.
System privileges	CREATE VIEW	The privilege to create views.
System privileges	CREATE ANY VIEW	The privilege to create any views.
System privileges	DROP ANY VIEW	The privilege to drop any views.
System privileges	SELECT ANY DICTIONARY	The privilege to use any data dictionaries.
System privileges	CREATE PROCEDURE	The privilege to create a stored procedure for a specified user.
System privileges	CREATE ANY PROCEDURE	The privilege to create any stored procedures for users.
System privileges	ALTER ANY PROCEDURE	The privilege to modify any stored procedures.
System privileges	DROP ANY PROCEDURE	The privilege to drop any stored procedure.
System privileges	EXECUTE ANY PROCEDURE	The privilege to execute any stored procedures.
System privileges	CREATE SYNONYM	The privilege to create a synonym for a specified user.
System privileges	CREATE ANY SYNONYM	The privilege to create any synonyms for users.
System privileges	CREATE PUBLIC SYNONYM	The privilege to create public synonyms.
System privileges	DROP ANY SYNONYM	The privilege to drop any synonyms.
System privileges	DROP PUBLIC SYNONYM	The privilege to drop public synonyms.
System privileges	CREATE SEQUENCE	The privilege to create a sequence for a specified user.
System privileges	CREATE ANY SEQUENCE	The privilege to create any sequences.
System privileges	ALTER ANY SEQUENCE	The privilege to modify any sequences.
System privileges	DROP ANY SEQUENCE	The privilege to drop any sequences.
System privileges	SELECT ANY SEQUENCE	The privilege to use any sequences.
System privileges	CREATE TRIGGER	The privilege to create a trigger for a specified user.
System privileges	CREATE ANY TRIGGER	The privilege to create any triggers for users.
System privileges	ALTER ANY TRIGGER	The privilege to modify any triggers.
System privileges	DROP ANY TRIGGER	The privilege to drop any triggers.
System privileges	CREATE PROFILE	The privilege to create profiles.
System privileges	ALTER PROFILE	The privilege to modify profiles.
System privileges	DROP PROFILE	The privilege to drop profiles.
System privileges	CREATE USER	The privilege to create a user.
System privileges	ALTER USER	The privilege to modify a user.
System privileges	DROP USER	The privilege to drop a user.
System privileges	BECOME USER	The privilege to switch the user status.
System privileges	CREATE TYPE	The privilege to create types.
System privileges	CREATE ANY TYPE	The privilege to create any type.
System privileges	ALTER ANY TYPE	The privilege to modify any type.
System privileges	DROP ANY TYPE	The privilege to drop any type.
System privileges	EXECUTE ANY TYPE	The privilege to execute any type.
System privileges	PURGE DBA_RECYCLEBIN	The privilege to purge the recycle bin.
System privileges	CREATE ANY OUTLINE	The privilege to create any execution plans.
System privileges	ALTER ANY OUTLINE	The privilege to modify any execution plans.
System privileges	DROP ANY OUTLINE	The privilege to drop any execution plans.
System privileges	CREATE TABLESPACE	The privilege to create a tablespace.
System privileges	ALTER TABLESPACE	The privilege to modify a tablespace.
System privileges	DROP TABLESPACE	The privilege to drop a tablespace.
System privileges	SHOW PROCESS	The privilege to view all user threads.
System privileges	ALTER SYSTEM	The privilege to modify server settings.
System privileges	CREATE DATABASE LINK	The privilege to create database connections.
System privileges	CREATE PUBLIC DATABASE LINK	The privilege to create public database connections.
System privileges	DROP DATABASE LINK	The privilege to drop database connections.
System privileges	ALTER SESSION	The privilege to modify sessions.
System privileges	ALTER DATABASE	The privilege to modify databases.
System privileges	CREATE ANY DIRECTORY	The privilege to create any directories.
System privileges	DROP ANY DIRECTORY	The privilege to drop any directories.
System privileges	DEBUG CONNECT SESSION	The privilege to debug connection sessions.
System privileges	DEBUG ANY PROCEDURE	The privilege to debug any procedures.

More information

For more information about how to manage privileges in OceanBase Database, see the following topics: