Oracle 9i Fundamentals I Exam Cram™ 2 (Exam 1Z0-031)

Role Creation Guidelines

Because roles include privileges that are necessary to enable a user to perform a task, the role name is typically some derivation of the application task or job title (as in my developer example).

The following are general guidelines for creating roles:

• Create roles for each application task.

• The name of an application role should correspond to the task within the application (for example, GL_ACCOUNTING).

• Assign the privileges necessary to perform the task to the application role.

• Whenever you create a role for a type of user, the name of the role should correspond to the job title (for example, GL_CLERK or AP_CLERK).

• Grant application roles to user roles.

• Grant user roles to users.

• Modify application roles by adding new required ...