This page provides an overview of system permissions.
MySQL tenant privileges
General privileges
| Privilege | Description |
|---|---|
| ALTER | The ALTER TABLE privilege. |
| CREATE | The CREATE TABLE privilege. |
| DELETE | The DELETE privilege. |
| DROP | The DROP privilege. |
| INSERT | The INSERT privilege. |
| SELECT | The SELECT privilege. |
| UPDATE | The UPDATE privilege. |
| INDEX | The CREATE INDEX and DROP INDEX privileges. |
| CREATE VIEW | The privileges to create and drop views. |
| SHOW VIEW | The SHOW CREATE VIEW privilege. |
| GRANT OPTION | The GRANT OPTION privilege. |
| CREATE ROUTINE | The privileges to create PROCEDURE and FUNCTION.
NoteThis privilege is available only in OceanBase Database V4.2.2 and later. |
| EXECUTE | The privileges to execute PROCEDURE and FUNCTION.
NoteThis privilege is available only in OceanBase Database V4.2.2 and later. |
| ALTER ROUTINE | The privileges to modify and drop PROCEDURE and FUNCTION.
NoteThis privilege is available only in OceanBase Database V4.2.2 and later. |
Administrator privileges
| Privilege | Description |
|---|---|
| CREATE USER | The CREATE USER, DROPUSER, RENAME USER, and REVOKE ALLPRIVILEGES privileges. |
| PROCESS | The PROCESS privilege. |
| SUPER | The privilege to modify global system parameters by using the SET GLOBAL statement. |
| SHOW DATABASES | The global SHOW DATABASES privilege. |
Oracle tenant privileges
General privileges
| Privilege | Description |
|---|---|
| CREATE SESSION | Privilege to create sessions. |
| CREATE TABLE | Privilege to create tables. |
| CREATE VIEW | Privilege to create views. |
| CREATE PROCEDURE | Privilege to create stored procedures for users. |
| CREATE SYNONYM | Privilege to create synonyms for users. |
| CREATE PUBLIC SYNONYM | Privilege to create public synonyms. |
| DROP PUBLIC SYNONYM | Privilege to drop public synonyms. |
| CREATE SEQUENCE | Privilege to create sequences for users. |
| CREATE TRIGGER | Privilege to create triggers for users. |
| CREATE TYPE | Privilege to create types. |
| SHOW PROCESS | Privilege to view all user threads. |
| CREATE DATABASE LINK | Privilege to create database links. |
| CREATE PUBLIC DATABASE LINK | Privilege to create public database links. |
| DROP DATABASE LINK | Privilege to drop database links. |
| ALTER SESSION | Privilege to modify sessions. |
ANY privileges
| Privilege | Description |
|---|---|
| CREATE ANY TABLE | The privilege to create any table. |
| ALTER ANY TABLE | The privilege to modify any table. |
| BACKUP ANY TABLE | The privilege to back up any table. |
| DROP ANY TABLE | The privilege to drop any table. |
| LOCK ANY TABLE | The privilege to lock any table. |
| COMMENT ANY TABLE | The privilege to add comments to any table. |
| SELECT ANY TABLE | The privilege to use any table. |
| INSERT ANY TABLE | The privilege to insert rows into any table. |
| UPDATE ANY TABLE | The privilege to modify rows in any table. |
| DELETE ANY TABLE | The privilege to delete data from any table. |
| FLASHBACK ANY TABLE | The privilege to flashback any table. |
| DROP ANY ROLE | The privilege to drop any role. |
| GRANT ANY ROLE | The privilege to grant any role. |
| ALTER ANY ROLE | The privilege to modify any role. |
| AUDIT ANY | The privilege to set audit options for any object. |
| GRANT ANY PRIVILEGE | The privilege to grant any system privilege to a user. |
| GRANT ANY OBJECT PRIVILEGE | The privilege to grant any object privilege to a user. |
| CREATE ANY INDEX | The privilege to create any index. |
| ALTER ANY INDEX | The privilege to modify any index. |
| DROP ANY INDEX | The privilege to drop any index. |
| CREATE ANY VIEW | The privilege to create a view. |
| DROP ANY VIEW | The privilege to drop any view. |
| SELECT ANY DICTIONARY | The privilege to use any data dictionary. |
| CREATE ANY PROCEDURE | The privilege to create any stored procedure for a user. |
| ALTER ANY PROCEDURE | The privilege to modify any stored procedure. |
| DROP ANY PROCEDURE | The privilege to drop any stored procedure. |
| EXECUTE ANY PROCEDURE | The privilege to execute any stored procedure. |
| CREATE ANY SYNONYM | The privilege to create any synonym for a user. |
| DROP ANY SYNONYM | The privilege to drop any synonym. |
| CREATE ANY SEQUENCE | The privilege to create any sequence. |
| ALTER ANY SEQUENCE | The privilege to modify any sequence. |
| DROP ANY SEQUENCE | The privilege to drop any sequence. |
| SELECT ANY SEQUENCE | The privilege to use any sequence. |
| CREATE ANY TRIGGER | The privilege to create any trigger for a user. |
| ALTER ANY TRIGGER | The privilege to modify any trigger. |
| DROP ANY TRIGGER | The privilege to drop any trigger. |
| CREATE ANY TYPE | The privilege to create any type. |
| ALTER ANY TYPE | The privilege to modify any type. |
| DROP ANY TYPE | The privilege to drop any type. |
| EXECUTE ANY TYPE | The privilege to execute any type. |
| UNDER ANY TYPE | The privilege to create SUBTYPE in the SCHEMA of all users except SYS based on TYPE. |
| CREATE ANY OUTLINE | The privilege to create any execution plan. |
| ALTER ANY OUTLINE | The privilege to modify any execution plan. |
| DROP ANY OUTLINE | The privilege to drop any execution plan. |
Administrator privileges
| Privilege | Description |
|---|---|
| ALTER SYSTEM | Privilege to modify server settings. |
| CREATE TABLESPACE | Privilege to create tablespaces. |
| ALTER TABLESPACE | Privilege to modify tablespaces. |
| CREATE ROLE | Privilege to create roles. |
| CREATE PROFILE | Privilege to create resource limit profiles. |
| ALTER PROFILE | Privilege to modify resource limit profiles. |
| DROP PROFILE | Privilege to drop resource limit profiles. |
| CREATE USER | Privilege to create users. |
| ALTER USER | Privilege to modify users. |
| DROP USER | Privilege to drop users. |
| PURGE DBA_RECYCLEBIN | Privilege to purge the recycle bin. |
| SYSKM | Privilege to the SYSKM role. |
| DROP TABLESPACE | Privilege to drop tablespaces. |
| ALTER DATABASE | Privilege to modify the DATABASE settings. |
| EXEMPT REDACTION POLICY | Privilege to bypass any existing REDACTION POLICY and view data. |
| SYSDBA | Privilege to the SYSDBA role. |
| SYSOPER | Privilege to the SYSOPER role. |
| SYSBACKUP | Privilege to the SYSBACKUP role. |
