Displaying privilege information for a role

You can generate dbschema information about the privileges that were granted for a particular role.

A role is a classification with privileges on database objects granted to the role. The DBA can assign the privileges of a related work task, such as an engineer, to a role and then grant that role to users, instead of granting the same set of privileges to every user. After a role is created, the DBA can use the GRANT statement to grant the role to users or to other roles.

For example, issue the following dbschema command and to display privileges that were granted for the calen role.

sharky% dbschema -p calen -d stores_demo

An example of information the dbschema utility displays is:

grant alter on table1 to 'calen'