Which three statements are true about common roles?
A.
A common role can be granted only to a common user.
B.
Only system privileges can be granted to a common role in a container database (CDB).
C.
Object privileges can be granted to a common role in a pluggable database (PDB).
D.
A common user that is granted a common role can grant the role to other common and local users in a
PDB.
E.
A common role cannot be created by a local user.
Explanation:
C: Commonly granted privileges that have been made to the common role apply in the root and all PDBs to which the grantor can connect, including PDBs that may be added later on.
D: Common users can both create and grant common roles to other common and local users.
E: Local users cannot create common roles.
Note: A common role is a role that is created in the root; a local role is created in a PDB.
Incorrect Answers:
A: Local users can grant common roles to common and other local users.
References: https://docs.oracle.com/database/121/DBSEG/authorization.htm
CDE