Oracle Security in CDBs and PDBs - OCP: Oracle Database 12c Administrator Certified Professional - page 624

In this chapter we will focus on security considerations in
the Oracle Database 12 c multitenant architecture. We will
discuss managing common and local users, common and
local privileges, and common and local roles. We will also enable common users to
access data in specific PDBs.
The first topic is about managing common and local users in the multitenant environ-
ment. In previous chapters, we defined common and local users, and you learned how to
create them. In this chapter, we will expand on what you've learned and demonstrate how
to manage the environment.
Next, we will discuss common and local privileges, which we have not discussed at
length previously, so in this chapter, we'll present more detail. Then we'll discuss common
and local roles, which have been implied in previous chapter examples but will be further
explained here.
Finally, we will explain and provide examples of how common users can access data in
specific PDBs.
Exam objectives are subject to change at any time without prior notice and
at Oracle's sole discretion. Please visit Oracle's Training and Certification
website ( http://www.oracle.com/education/certification/ ) for the
most current exam-objectives listing.
Managing Security in a CDB and PDBs
In the new Oracle Database 12 c multitenant architecture, where the multitenant container
database (CDB) can host zero, one, or many DBA-created pluggable databases (PDBs), there
are a few key differences between CDBs and non-CDBs regarding the creation and manage-
ment of users, privileges, and roles. In the following sections, we'll provide narrative for and
examples of each of these subjects.
It is important to understand the span of access that a user has in the multitenant
environment:
Common Users Common users, as discussed in previous chapters, are defined in the CDB
and have access across the PDBs.
Local Users Local users are defined for one PDB within a CDB.