Role-Based Object Permissions on Users and Roles

Permissions on database objects can be granted and revoked to role-based users, user-extended roles, and standalone roles, with or without administrative rights