CDB PDB user rights management

Public and local users

[email protected]> select username,common,con_id from cdb_users
where username in ('SYS','HR');
COMMON  Columns show  YES  For public users , In all containers, including those created in the future  PDB  There are 
COMMON  Columns show  NO  For local users , Only exists in the current container 

Copy

cdb Create public users in

 Create public users  c##user01, Set the password to  oracle
[email protected]> create user c##user01 identified by oracle;
[email protected]> select username,common,con_id from cdb_users
where username in ('SYS','HR','C##USER01');

Copy

pdb Create local users in

pdb  Create local users in  user02
[email protected]> create user user02 identified by oracle;
[email protected]> select username,common,con_id from cdb_users
where username in ('SYS','HR','C##USER01','USER02');

Copy

Public and local permissions and roles

cdb To authorize public users

 stay  cdb  It is specified in  container=current  To authorize 
[email protected]> grant connect to c##user01 container=current;
cdb  Login with permission , pdb  No authority 
sqlplus c##user01/[email protected]
sqlplus c##user01/[email protected]

 stay  cdb  Authorized in  container=all
[email protected]> grant connect to c##user01 container=all;
cdb pdb  All have authority 

Copy

pdb To authorize local users

pdb Authorize local users in , Appoint container=all Report errors , Appoint container=current success

[email protected]> grant connect to user02 container=all;
[email protected]> grant connect to user02 container=current;

Copy