Re-creating Compatibility Roles

To re-create dropped compatibility roles, use the CREATE ROLE statement and specify the compatibility role name.

Prerequisites

The MANAGE ROLES system privilege.
Administrative privileges on all of the system privileges granted to the compatibility role being recreated.

Task

Re-creating SYS_AUTH_DBA_ROLE is semantically equivalent to re-creating both the SYS_AUTH_SA_ROLE and SYS_AUTH_SSO_ROLE roles; you cannot re-create these two roles separately.

When you re-create any compatibility role other than SYS_AUTH_DBA_ROLE, administrative privileges on the re-created compatibility role are automatically granted to SYS_AUTH_DBA_ROLE , as long as SYS_AUTH_DBA_ROLE has not been dropped.

When you re-create any compatibility role other than SYS_AUTH_DBA_ROLE, or SYS_AUTH_PERMS_ADMIN_ROLE, administrative privileges on the re-created compatibility role are automatically granted to SYS_AUTH_PERMS_ADMIN_ROLE, as long as SYS_AUTH_PERMS_ADMIN_ROLE has not been dropped.

To re-create a compatibility role, execute:

CREATE ROLE compatibility_role_name [ WITH ADMIN [ONLY] userid [, ...] ]

CREATE ROLE SYS_AUTH_OPERATOR_ROLE
WITH ADMIN ONLY user1, user2

This statement:

Recreates the compatibility role SYS_AUTH_OPERATOR_ROLE.
Grants SYS_AUTH_OPERATOR_ROLE with administrative privileges to the compatibility role SYS_AUTH_DBA_ROLE, if SYS_AUTH_DBA_ROLE exists.
Grants SYS_AUTH_OPERATOR_ROLE with administrative privileges to the compatibility role SYS_AUTH_PERMS_ADMIN_ROLE, if SYS_AUTH_PERMS_ADMIN_ROLE exists.
Grants the following system privileges to SYS_AUTH_OPERATOR_ROLE with the NO ADMIN option:
- BACKUP DATABASE
- DROP CONNECTION
- CHECKPOINT
- MONITOR
- ACCESS SERVER LS
Grants the system role SYS_AUTH_OPERATOR_ROLE to User1 and User2 with the ADMIN ONLY option.