You can control which Oracle Exadata System Software commands users can run by granting privileges to roles, and granting roles to users.

For example, you can specify that a user can run the LIST GRIDDISK command but not ALTER GRIDDISK. This level of control is useful in Oracle Cloud environments, where you might want to allow full access to the system to only a few users.

• Overview of Creating Exadata System Software Users
  
• Creating Roles and Getting Information about Roles
  Use the CREATE ROLE command to create roles for Oracle Exadata System Software users.
• Granting and Revoking Privileges
  Use the GRANT PRIVILEGE command to grant privileges to roles for Oracle Exadata System Software users.
• Creating Users
  Use the CREATE USER command to create Oracle Exadata System Software users.
• Configuring Password Expiration for Users Accessing the Server Remotely
  You can configure CELL attributes to expire user passwords.
• Granting and Revoking Roles
  Use the GRANT ROLE command to create roles to Oracle Exadata System Software users.