Good morning,
When I create a role, such as:
create role atestrole;
I see that as soon as the role is created, it is automatically granted to SYS.
I thought, given the fact that, SYS already has all the system and object privileges in existence, that the automatic grant was superfluous and unnecessary. To test this, I revoked the role "atestrole" from SYS and then attempted to grant "atestrole" as user SYS to SCOTT. As expected, SYS was able to grant "atestrole" to SCOTT.
At this point, it looks like the automatic granting of new roles to SYS does not result in SYS being able to do something that it would not be able to do otherwise.
The question: Does automatically granting SYS all newly created roles, cause SYS to have some abilities it would not otherwise have or, is it superfluous (as it seems to be) ?
Thank you for your help,
John.
PS: the new roles are being automatically granted to SYS by Oracle itself, it is not something being done "manually".
Edited by: 440bx - 11gR2 on Sep 20, 2010 8:23 AM - added PS.