2.283 OS_ROLES

OS_ROLES determines whether Oracle or the operating system identifies and manages the roles of each username.

Note:

Enterprise User Security (EUS) is deprecated with Oracle Database 23ai.

Oracle recommends that you migrate to using Centrally Managed Users (CMU). This feature enables you to directly connect with Microsoft Active Directory without an intervening directory service for enterprise user authentication and authorization to the database. If your Oracle Database is in the cloud, you can also choose to move to one of the newer integrations with a cloud identity provider.

Property Description

Parameter type

Boolean

Default value

false

Modifiable

No

Modifiable in a PDB

No

Range of values

true | false

Basic

No

Values

  • TRUE

    The operating system completely manages the role grants for all database usernames. When a user attempts to create a session, the username's security domain is initialized using the roles identified by the operating system.

    Revocation by Oracle of roles granted by the operating system is ignored, as are any roles previously granted by Oracle.

  • FALSE

    Oracle identifies and manages the roles.

See Also:

Oracle Database Administrator’s Guide and Oracle Database Enterprise User Security Administrator's Guide for more information on roles and on setting this parameter