SQL> CREATE ROLE c##role1 CONTAINER=ALL; SQL> GRANT CREATE SESSION, CREATE TABLE TO c##role1 CONTAINER=ALL; SQL> CREATE USER c##admin IDENTIFIED BY orc1123; SQL> GRANT c##role1 TO c##admin CONTAINER=ALL; SQL> GRANT SELECT ON DBA_USERS to c##role1 CONTAINER=ALL;