連接具有DBA權(quán)限的用戶；2. 使用CREATE USER命令創(chuàng)建用戶並指定必要參數(shù)；3. 授予CREATE SESSION、CREATE TABLE等系統(tǒng)權(quán)限或使用CONNECT和RESOURCE角色；4. 根據(jù)需要授予額外權(quán)限如CREATE PROCEDURE或UNLIMITED TABLESPACE；5. 可選地授予對(duì)其他用戶對(duì)象的對(duì)象權(quán)限；6. 驗(yàn)證用戶登錄，整個(gè)過程需確保在正確的容器中執(zhí)行並遵循最小權(quán)限原則，使用強(qiáng)密碼策略，最終完成Oracle用戶創(chuàng)建與權(quán)限分配。

Creating a user in Oracle and granting privileges involves a few straightforward steps, but requires proper administrative rights (like SYSDBA ). Here's how to do it using SQL*Plus or any Oracle SQL client.

? 1. Connect as a DBA User

First, connect to the Oracle database with a user that has DBA privileges (like SYS or SYSTEM ):

 sqlplus / as sysdba
-- or
sqlplus system/password@database

? 2. Create a New User

Use the CREATE USER command to create a user. You must specify:

• Username
• Password
• Default tablespace (optional but recommended)
• Temporary tablespace
• Quota on tablespace

Example:

 CREATE USER john
IDENTIFIED BY johnpass
DEFAULT TABLESPACE users
TEMPORARY TABLESPACE temp
QUOTA 100M ON users;

? If you're using Oracle 12c or later with pluggable databases (PDBs), make sure you're connected to the correct PDB.

? 3. Grant System Privileges

Now grant necessary privileges so the user can connect and create objects.

Common grants:

 -- Allow user to log in
GRANT CREATE SESSION TO john;

-- Allow user to create tables, views, etc.
GRANT CREATE TABLE TO john;
GRANT CREATE VIEW TO john;
GRANT CREATE SEQUENCE TO john;

Alternatively, use predefined roles:

 -- Grants most common development privileges
GRANT RESOURCE, CONNECT TO john;

? CONNECT gives basic session rights.
? RESOURCE allows creating tables, sequences, etc.

? 4. (Optional) Grant Additional Privileges

Depending on needs:

 -- For creating procedures, functions, packages
GRANT CREATE PROCEDURE TO john;

-- For unlimited tablespace
GRANT UNLIMITED TABLESPACE TO john;

-- For accessing any table (usually not recommended)
-- GRANT SELECT ANY TABLE TO john;

? 5. (Optional) Grant Object Privileges

If the user needs access to objects owned by others:

 GRANT SELECT, INSERT ON scott.emp TO john;

? 6. Verify User Login

Now the user can connect:

 sqlplus john/johnpass@database

?? Notes

• In Oracle 12c and later , if using a multitenant architecture (CDB/PDB) , ensure you're in the right container:

   ALTER SESSION SET CONTAINER = pdborcl;

• Always follow the principle of least privilege — only grant what's needed.
• Use strong passwords and consider password policies via profiles.

---

Basically, the core steps are:

1. Create user → 2. Grant connect/session → 3. Grant object creation rights → 4. Optional extra grants.

That's it — you've successfully created a user and granted privileges in Oracle.

以上是如何在Oracle中創(chuàng)建用戶並授予特權(quán)？的詳細(xì)內(nèi)容。更多資訊請(qǐng)關(guān)注PHP中文網(wǎng)其他相關(guān)文章！