The SYS_AUTH_VALIDATE_ROLE role is granted the VALIDATE ANY OBJECT system privilege with the WITH NO ADMIN OPTION clause.