Role Designer

Creating a Role in Oracle Developer Tools

Use the Role Designer to create new database roles.

Starting the Role Designer

In the Server Explorer, right-click on the Roles node, and select new Role.

Using the Role Designer

The controls in the Role Designer are as follows:

Control Description

Role name

Enter the role name or accept the autogenerated name.

Authentication

Enter or select the authentication type. The valid values are: None (default), Password, External, and Global.

  • None: Role is automatically authorized by the database and no password is required to enable the role.

  • Password: Lets you create a local role and indicates that the user must specify the password to the database when enabling the role. The password can contain only single-byte characters from your database character set regardless of whether this character set also contains multibyte characters.

  • External: Lets you create an external role. An external user must be authorized by an external service, such as an operating system or third-party service, before enabling the role.

    Depending on the operating system, the user may have to specify a password to the operating system before the role is enabled.

  • Global: Lets you create a global role. A global user must be authorized to use the role by the enterprise directory service before the role is enabled at login.

If a non-SYSDBA user edits a role, the authentication type appears as None even if it is one of the others.

For more information on authentication with roles, see CREATE ROLE in Oracle Database SQL Language Reference.

Password

Enter the password for the user. This is only enabled when the Authentication type is password.

Confirm Password

Enter the password. This is only enabled when the Authentication type is password.

Preview SQL

Displays the CREATE ROLE SQL dialog. This button is only enabled when there is a pending SQL statement to execute.

Verifies that role name, password authentication, password, and confirm password are not empty and that password and confirm password are the same

Save

Verifies that role name, password authentication, password, and confirm password are not empty and that password and confirm password are the same

Save the changes.

See Also

Role Nodes | About Users, Roles, and Privileges