View the Exhibit and examine the privileges granted to the MGR_ROLE role. The user SKD has been
granted the CONNECT and RESOURCE roles only. The database administrator (DBA) grants
MGR_ROLE to the user SKD by executing the command: SQL> GRANT MGR_ROLE TO SKD WITH
ADMIN OPTION; Which statement is true about the user SKD after he/she is granted this role?
See the Exhibit:
A.
The user SKD can grant only the MGR_ROLE role to other users, but not the privileges in it
B.
The user SKD can revoke the MGR_ROLE only from the users for whom he/she is the grantor
C.
The user SKD can grant the privileges in the MGR_ROLE role to other users but not with ADMIN
OPTION
D.
The user SKD can grant the privileges in the MGR_ROLE role to other users, but cannot revoke
privileges from them
Exhibit not showing
why B is not correct too?
Yes only answer A is correct. You can test it using …
conn SYS /
CREATE ROLE MGR_ROLE;
GRANT CREATE ROLE, CREATE USER, SELECT ANY TABLE TO MGR_ROLE;
CREATE USER tester IDENTIFIED BY ohdear
DEFAULT TABLESPACE users
TEMPORARY TABLESPACE temp
QUOTA UNLIMITED ON users
ACCOUNT UNLOCK;
GRANT CONNECT TO tester;
GRANT RESOURCE TO tester;
GRANT MGR_ROLE TO tester WITH ADMIN OPTION;
revoke MGR_ROLE from tester;
drop role MGR_ROLE;
drop user tester cascade;
Privilege – right to execute SQL, or access another user’s object.
Role – created by users (usually administrators) to group privileges or other roles. They make easy to grant multiple privileges or roles to users.
So Role don’t necessarily have Priviledge!
B is incorrect. GRANT MGR_ROLE TO SKD WITH ADMIN OPTION