View user privileges

After creating a user, you can view the privileges of the user.

Procedure

1. Log on to an Oracle tenant of the database.

2. Execute the following statements to view the privileges granted to a user:

   • View the system privileges granted to a user

     Administrators can view the system privileges granted to a user through the DBA_SYS_PRIVS view.

     obclient> SELECT * FROM DBA_SYS_PRIVS WHERE grantee='SECUSER';
     +---------+-----------------+--------------+
     | GRANTEE | PRIVILEGE       | ADMIN_OPTION |
     +---------+-----------------+--------------+
     | SECUSER | CREATE SEQUENCE | NO           |
     +---------+-----------------+--------------+
     1 row in set
     

     For more information about the DBA_SYS_PRIVS view, see DBA_SYS_PRIVS.

   • View the system privileges granted to the current user

     Both administrators and common users can view their own system privileges through the USER_SYS_PRIVS view.

     obclient> SELECT * FROM USER_SYS_PRIVS;
     +----------+----------------+--------------+
     | USERNAME | PRIVILEGE      | ADMIN_OPTION |
     +----------+----------------+--------------+
     | USER2    | CREATE SESSION | NO           |
     | USER2    | CREATE TABLE   | YES          |
     +----------+----------------+--------------+
     2 row in set
     

     For more information about the USER_SYS_PRIVS view, see USER_SYS_PRIVS.

   • View the object privileges granted to a user

     Administrators can view the object privileges granted to a user through the DBA_TAB_PRIVS view.

     obclient> SELECT * FROM DBA_TAB_PRIVS WHERE grantee='SECUSER';
     +---------+-------+------------+---------+-----------+-----------+-----------+
     | GRANTEE | OWNER | TABLE_NAME | GRANTOR | PRIVILEGE | GRANTABLE | HIERARCHY |
     +---------+-------+------------+---------+-----------+-----------+-----------+
     | SECUSER | SYS   | TBL4       | SYS     | SELECT    | NO        | NO        |
     | SECUSER | SYS   | TBL4       | SYS     | UPDATE    | NO        | NO        |
     +---------+-------+------------+---------+-----------+-----------+-----------+
     2 rows in set
     

     For more information about the DBA_TAB_PRIVS view, see DBA_TAB_PRIVS.

   • View the object privileges granted to the current user

     Both administrators and common users can view their own object privileges through the USER_TAB_PRIVS view.

     obclient> SELECT * FROM USER_TAB_PRIVS;
     +---------+-------+-----------------+---------+-----------+-----------+-----------+
     | GRANTEE | OWNER | TABLE_NAME      | GRANTOR | PRIVILEGE | GRANTABLE | HIERARCHY |
     +---------+-------+-----------------+---------+-----------+-----------+-----------+
     | PUBLIC  | SYS   | VERIFY_FUNCTION | SYS     | EXECUTE   | NO        | NO        |
     +---------+-------+-----------------+---------+-----------+-----------+-----------+
     1 row in set
     

     For more information about the USER_TAB_PRIVS view, see USER_TAB_PRIVS.

   • View the roles that a user has

     Administrators can view the roles that a user has through the DBA_ROLE_PRIVS view.

     obclient> SELECT * FROM DBA_ROLE_PRIVS WHERE grantee='USER2';
     +---------+--------------+--------------+--------------+
     | GRANTEE | GRANTED_ROLE | ADMIN_OPTION | DEFAULT_ROLE |
     +---------+--------------+--------------+--------------+
     | USER2   | ROLE1        | NO           | YES          |
     +---------+--------------+--------------+--------------+
     1 row in set
     

     For more information about the DBA_ROLE_PRIVS view, see DBA_ROLE_PRIVS.

     If you need to view the object privileges or system privileges that each role has, see View a role.

   • View the roles granted to the current user

     Both administrators and common users can view the roles granted to the current user through the USER_ROLE_PRIVS view.

     obclient> SELECT * FROM USER_ROLE_PRIVS;
     +---------+--------------+--------------+--------------+
     | GRANTEE | GRANTED_ROLE | ADMIN_OPTION | DEFAULT_ROLE |
     +---------+--------------+--------------+--------------+
     | SYS     | ROLE1        | YES          | YES          |
     +---------+--------------+--------------+--------------+
     1 row in set
     

     For more information about the USER_ROLE_PRIVS view, see USER_ROLE_PRIVS.

     If you need to view the object privileges or system privileges that the current role has, see View a role.