GRANT

Purpose

You can use this statement as a system administrator to grant object privileges, system privileges, and roles to users.

Required privileges

You must have the privileges that you want to grant, and privilege delegation must be enabled. For example, if you want to grant the SELECT privilege on the tbl1 table to user2 as user1, user1 must have the SELECT privilege on the tbl1 table, and the privilege delegation of the SELECT privilege on tbl1 must be enabled.

Syntax

/*Grant object privileges*/
GRANT {obj_all_col_priv [, obj_all_col_priv...]} 
    ON obj_clause 
    TO {grant_user [, grant_user...]} 
    [WITH GRANT OPTION]

/* Grant system privileges or roles */
GRANT obj_all_col_priv [, obj_all_col_priv...] 
    TO grantee_clause 
    [WITH ADMIN OPTION]

grantee_clause:  
      grant_user [, grant_user...] 
    | grant_user IDENTIFIED BY password

obj_all_col_priv:  
      role 
    | sys_and_obj_priv [(column_list)] 
    | ALL [PRIVILEGES] [(column_list)]

Parameters

Examples

• Grant the CREATE VIEW privilege to user1, and enable privilege delegation for the privilege.

  obclient> GRANT CREATE VIEW TO user1 WITH ADMIN OPTION;
  

• Grant the CONNECT role to user1, and change the password for user1.

  obclient> GRANT CONNECT TO user1 IDENTIFIED by '********';
  

  Check the password of user1 in the dba_users table. The password is updated to the new one.

• Grant the COMMENT ANY TABLE privilege to role1.

  GRANT COMMENT ANY TABLE TO role1;
  

References

• For more information about how to view user privileges, see View user privileges.

• For more information about how to view roles and role privileges, see View roles.

• You can query the information about the created user in the dba_users table.