CONNECT, RESOURCE, And DBA Roles

The CONNECT, RESOURCE, and DBA roles are predefined roles that are available for backward compatibility. These are created by Oracle when the database is created. When you create a user with Oracle Enterprise Manager, the CONNECT role is automatically granted to that user.

The following system privileges are granted to the CONNECT role:

  • ALTER SESSION
  • CREATE CLUSTER
  • CREATE DATABASE LINK
  • CREATE SEQUENCE
  • CREATE SESSION
  • CREATE SYNONYM
  • CREATE TABLE
  • CREATE VIEW


When you grant a user the RESOURCE role, that user is granted the UNLIMITED TABLESPACE system privilege as well. The following system privileges are granted to the RESOURCE role:

  • CREATE CLUSTER
  • CREATE PROCEDURE
  • CREATE SEQUENCE
  • CREATE TABLE
  • CREATE TRIGGER
  • CREATE TYPE

The DBA role includes all system privileges (95 separate grants), the capability to grant those system privileges to others, and UNLIMITED TABLESPACE is granted in the same way as with the RESOURCE role. If the EXP_FULL_DATABASE and IMP_FULL_DATABASE roles have been created, they are granted implicitly with the DBA role as are the DELETE, EXECUTE and SELECT_CATALOG_ROLE roles.

You can grant additional privileges to or revoke privileges from the CONNECT, RESOURCE, and DBA roles just as you would any other role that you created.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s