About Privilege Management

You can control user privileges in the following ways:

• Granting and revoking individual privileges. You can grant individual privileges, for example, the privilege to perform the UPDATE SQL statement, to individual users or to groups of users.

• Creating a role and assigning privileges to it. A role is a named group of related privileges that you grant, as a group, to users or other roles.

• Creating a secure application role. A secure application role enables you to define conditions that control when a database role can be enabled. For example, a secure application role can check the IP address associated with a user session before allowing the session to enable a database role.