Which two statements are true about the c##admin user that is created in all PDBs?

You are administering a multitenant container database (CDB) cdb1 that has multiple
pluggable databases (PDBs). As the sys user on cdb$root, you execute the commands:

SQL> CREATE USER C##ADMIN IDENTIFIED BY orc1123;
SQL> GRANT CREATE SESSION to C##ADMIN CONTAINER=ALL;
SQL> GRANT CREATE USER TO C##ADMIN CONTAINER=ALL;
Which two statements are true about the c##admin user that is created in all PDBs?

You are administering a multitenant container database (CDB) cdb1 that has multiple
pluggable databases (PDBs). As the sys user on cdb$root, you execute the commands:

SQL> CREATE USER C##ADMIN IDENTIFIED BY orc1123;
SQL> GRANT CREATE SESSION to C##ADMIN CONTAINER=ALL;
SQL> GRANT CREATE USER TO C##ADMIN CONTAINER=ALL;
Which two statements are true about the c##admin user that is created in all PDBs?

A.
It can create only local users in all the PDBs.

B.
It has a common schema for all the PDBs.

C.
It can create common users only when it is logged in to the CDB.

D.
It can create only local users in the CDB.

E.
It can be granted only common roles in the PDBs.



Leave a Reply 15

Your email address will not be published. Required fields are marked *


puntano

puntano

(A and B) or (B and C)….

Vonpire

Vonpire

Why can’t C##ADMIN create common users in all the pdb’s if he has GRANT CREATE USER TO C##ADMIN CONTAINER=ALL ???

What if he executes the following when connected to root?

CREATE USER C##ADMIN2 IDENTIFIED BY orc1123;

Isn’t this new common user created in root and all the pdb’s?

Why A?

I don’t understand…

Best guess is B C for me

Tri

Tri

C is not correct!

Anthony

Anthony

Vonpire,

B, says it is a schema and the issue is not created any objects below the user, so it is not a schema.

I think A and C.

KRA

KRA

if a common user has create user privilege it can create a other common user ==> A is not true

B C are correct

Feedback

Feedback

I also think B and C a common user with that privilege should also be able to create other users

max

max

BC A is wrong good work KRA

RNW

RNW

I still think it’s A & C

A > Does it create Local Users in PDBs? Yes.
Does it create Common Users in PDBs? No.
Hence – it creates ONLY LOCAL USERS in PDBs

B > Wrong – the schema cannot be common between multiple PDBs… Yes they can have the same name – as the user is a common user – but on itself the schema cannot be common.

C > Correct – everyone agrees here

D > Wrong – It can create both Local and Common users in the CDB

E > Obviously Wrong

Aejaz

Aejaz

C (Correct )
Ref: https://docs.oracle.com/database/121/DBSEG/users.htm#DBSEG99785 >About Creating Common User Accounts

–To create a common user, you must be connected to the root and have the commonly granted CREATE USER system privilege.
— The session’s current container must be CDB$ROOT.

The above statement also suggests /proves A is correct .
Even as the common user, it can only create local users in PDB .. Why? Because one of the condition to create a common user is “The session’s current container must be CDB$ROOT.

Aejaz

Aejaz

So the Right answer is A and C for sure.. Correct me if am wrong

raj

raj

A,C is correct one as explained by RNW

goszczu

goszczu

A is correct

Which two statements are true about the C##ADMIN user?
a. The user is created in CDB$ROOT and in all PDBs.
b. The user is created only in CDB$ROOT.
c. The user is granted CONNECT and RESOURCE roles only in CDB$ROOT.
d. The user cannot be granted other privileges and roles in the PDBs.
e. The user is created in all PDBs but will share a common schema created in CDB$ROOT.

The correct answers are A and C. Users with names that have a C## prefix are created as common users, and common users are created in CDB$ROOT and all PDBs. The roles granted to a common user are specific to a PDB, and in this case, they are granted only in CDB$ROOT. Answer B is incorrect because the user is created in CDB$ROOT and all PDBs. Answer D is incorrect because a common user can be granted roles and privileges in a PDB. Answer E is incorrect because each PDB will have a schema associated with the common user.