Privilege types in Oracle mode|V4.2.0| docs|Distributed Database

Privilege types in Oracle mode

Last Updated：2023-10-31 11:17:11 Updated

This topic describes the privilege types supported by the Oracle mode of OceanBase Database.

The Oracle mode of OceanBase Database supports the following two types of privileges:

Object privileges: the privileges to operate on specific objects, such as the ALTER, SELECT, and UPDATE privileges on a table.
System privileges: the privileges that allow users to perform specific database operations on one or all schemas.

Note

System privileges provide much broader permissions than object privileges.

The following table lists the privileges supported by the Oracle mode of OceanBase Database.

Type	Privilege	Description
Object privilege	ALTER	The privilege to modify schemas.
Object privilege	INSERT	The privilege to insert data into tables and views.
Object privilege	UPDATE	The privilege to modify data in tables and views.
Object privilege	DELETE	The privilege to delete data from tables and views.
Object privilege	SELECT	The privilege to use tables, views, synonyms, and sequences.
Object privilege	INDEX	The privilege to add indexes to tables.
Object privilege	REFERENCE	The privilege to reference tables.
Object privilege	EXECUTE	The privilege to execute stored procedures, functions, and system packages.
Object privilege	DEBUG	The privilege to debug procedures.
Object privilege	READ	The read privilege.
Object privilege	WRITE	The write privilege.
System privilege	CREATE SESSION	The privilege to create sessions.
System privilege	CREATE TABLE	The privilege to create tables.
System privilege	CREATE ANY TABLE	The privilege to create any tables.
System privilege	ALTER ANY TABLE	The privilege to modify any tables.
System privilege	DELETE ANY TABLE	The privilege to delete data from any tables.
System privilege	DROP ANY TABLE	The privilege to drop any tables.
System privilege	BACKUP ANY TABLE	The privilege to back up any tables.
System privilege	LOCK ANY TABLE	The privilege to lock any tables.
System privilege	COMMENT ANY TABLE	The privilege to add comments to any tables.
System privilege	INSERT ANY TABLE	The privilege to insert rows into any tables.
System privilege	SELECT ANY TABLE	The privilege to use any tables.
System privilege	FLASHBACK ANY TABLE	The privilege to flash back any tables.
System privilege	UPDATE ANY TABLE	The privilege to modify rows of any tables.
System privilege	CREATE ROLE	The privilege to create a role.
System privilege	DROP ANY ROLE	The privilege to drop any role.
System privilege	GRANT ANY ROLE	The privilege to grant any role.
System privilege	ALTER ANY ROLE	The privilege to modify any role.
System privilege	AUDIT ANY	The privilege to set audit options for any objects.
System privilege	GRANT ANY PRIVILEGE	The privilege to grant any system privileges to users.
System privilege	GRANT ANY OBJECT PRIVILEGE	The privilege to grant any object privileges to users.
System privilege	CREATE ANY INDEX	The privilege to create any indexes.
System privilege	ALTER ANY INDEX	The privilege to modify any indexes.
System privilege	DROP ANY INDEX	The privilege to delete any indexes.
System privilege	CREATE VIEW	The privilege to create views.
System privilege	CREATE ANY VIEW	The privilege to create any views.
System privilege	DROP ANY VIEW	The privilege to drop any views.
System privilege	SELECT ANY DICTIONARY	The privilege to use any data dictionaries.
System privilege	CREATE PROCEDURE	The privilege to create a stored procedure for a specified user.
System privilege	CREATE ANY PROCEDURE	The privilege to create any stored procedures for users.
System privilege	ALTER ANY PROCEDURE	The privilege to modify any stored procedures.
System privilege	DROP ANY PROCEDURE	The privilege to drop any stored procedures.
System privilege	EXECUTE ANY PROCEDURE	The privilege to execute any stored procedures.
System privilege	CREATE SYNONYM	The privilege to create a synonym for a specified user.
System privilege	CREATE ANY SYNONYM	The privilege to create any synonyms for users.
System privilege	CREATE PUBLIC SYNONYM	The privilege to create public synonyms.
System privilege	DROP ANY SYNONYM	The privilege to drop any synonyms.
System privilege	DROP PUBLIC SYNONYM	The privilege to drop public synonyms.
System privilege	CREATE SEQUENCE	The privilege to create a sequence for a specified user.
System privilege	CREATE ANY SEQUENCE	The privilege to create any sequences.
System privilege	ALTER ANY SEQUENCE	The privilege to modify any sequences.
System privilege	DROP ANY SEQUENCE	The privilege to drop any sequences.
System privilege	SELECT ANY SEQUENCE	The privilege to use any sequences.
System privilege	CREATE TRIGGER	The privilege to create a trigger for a specified user.
System privilege	CREATE ANY TRIGGER	The privilege to create any triggers for users.
System privilege	ALTER ANY TRIGGER	The privilege to modify any triggers.
System privilege	DROP ANY TRIGGER	The privilege to drop any triggers.
System privilege	CREATE PROFILE	The privilege to create profiles.
System privilege	ALTER PROFILE	The privilege to modify profiles.
System privilege	DROP PROFILE	The privilege to drop profiles.
System privilege	CREATE USER	The privilege to create a user.
System privilege	ALTER USER	The privilege to modify a user.
System privilege	DROP USER	The privilege to drop a user.
System privilege	BECOME USER	The privilege to switch the user status.
System privilege	CREATE TYPE	The privilege to create types.
System privilege	CREATE ANY TYPE	The privilege to create any types.
System privilege	ALTER ANY TYPE	The privilege to modify any types.
System privilege	DROP ANY TYPE	The privilege to drop any types.
System privilege	EXECUTE ANY TYPE	The privilege to execute any types.
System privilege	PURGE DBA_RECYCLEBIN	The privilege to purge the recycle bin.
System privilege	CREATE ANY OUTLINE	The privilege to create any execution plans.
System privilege	ALTER ANY OUTLINE	The privilege to modify any execution plans.
System privilege	DROP ANY OUTLINE	The privilege to drop any execution plans.
System privilege	CREATE TABLESPACE	The privilege to create a tablespace.
System privilege	ALTER TABLESPACE	The privilege to modify a tablespace.
System privilege	DROP TABLESPACE	The privilege to drop a tablespace.
System privilege	SHOW PROCESS	The privilege to view all user threads.
System privilege	ALTER SYSTEM	The privilege to modify server settings.
System privilege	CREATE DATABASE LINK	The privilege to create a database link.
System privilege	CREATE PUBLIC DATABASE LINK	The privilege to create a public database link.
System privilege	DROP DATABASE LINK	The privilege to drop a database link.
System privilege	ALTER SESSION	The privilege to modify sessions.
System privilege	ALTER DATABASE	The privilege to modify databases.
System privilege	CREATE ANY DIRECTORY	The privilege to create any directories.
System privilege	DROP ANY DIRECTORY	The privilege to drop any directories.
System privilege	DEBUG CONNECT SESSION	The privilege to debug connection sessions.
System privilege	DEBUG ANY PROCEDURE	The privilege to debug any procedures.

References

For more information about how to manage privileges in OceanBase Database, see the following topics: