Help with User Permissions - Oracle

[Karey]

I have a user (user #1) who creates other users (user #2). User #2 needs
to be able to create sessions, the privledge needs to be granted when logged
into the Db as user #1. I know to grant user #2 with create session privledges
is: grant create session to User#2, but when logged in as user #1 Oracle
states the user #1 does not have permissions to grant session to another
user.

What permissions does user #1 need to be able to grant create session to
another user?

Thanks!

[JigsawSoftware]

Karey,

Oracle has a pre-defined role called "DBA", if User #1 has this role then
he/she will be able to grant "CREATE SESSION" to User #2. However, this
role is very powerful and users that have it need to managed closely as they
have the "keys to the kingdom" with this role.

Otherwise, there are privledges like "ALTER USER" and "GRANT ANY PRIVIILEGE"
that would need to be given to this user. However, I am not sure of the
complete combination of roles you may need to do this.

There is a book by O'Reilly called "Oracle Security" that has a good definition
of how all these roles and privleges work. It may be worth the $35.00 investment
to get it.

Richard Hanson
President, Jigsaw Software, Inc.
RHanson@JigsawSoftware.com

"Karey" <kkyle@catch4.com> wrote:
>
>I have a user (user #1) who creates other users (user #2). User #2 needs
>to be able to create sessions, the privledge needs to be granted when logged
>into the Db as user #1. I know to grant user #2 with create session privledges
>is: grant create session to User#2, but when logged in as user #1 Oracle
>states the user #1 does not have permissions to grant session to another
>user.
>
>What permissions does user #1 need to be able to grant create session to
>another user?
>
>Thanks!