Migrate all underlying system privileges of a compatibility role to a user-defined role.
Compatibility roles are immutable, but they can be migrated in their entirety to a new user-defined role. Once migrated, the compatibility role is automatically dropped. This process is systematically equivalent to individually granting each underlying system privilege to a user-defined role, then manually dropping the compatibility role.
During migration:
Compatibility Role | Statement |
---|---|
SYS_AUTH_DBA_ROLE SYS_AUTH_DBA_ROLE is successfully migrated if:
|
ALTER ROLE SYS_AUTH_DBA_ROLE MIGRATE TO new_role_name, new_sa_role_name, new_sso_role_name |
Any other compatibility role The compatibility role is successfully migrated if:
|
ALTER ROLE compatibility_sys_role_name MIGRATE TO new_role_name |
The following statements migrate the SYS_AUTH_DBA_ROLE to the new roles Custom_DBA, Custom_SA, and Custom_SSO, respectively, and migrate the SYS_AUTH_OPERATOR_ROLE role to the new role Operator_role. All users, underlying system privileges, and roles granted to the original roles are automatically migrated to the new roles. Finally, SYS_AUTH_DBA_ROLE, SYS_AUTH_SA_ROLE, SYS_AUTH_SSO_ROLE and SYS_AUTH_OPERATOR_ROLE are all dropped.
ALTER ROLE SYS_AUTH_DBA_ROLE MIGRATE TO Custom_DBA, Custom_SA, Custom_SSO
ALTER ROLE SYS_AUTH_OPERATOR_ROLE MIGRATE TO Operator_role