Examine this configuration:
1. CDB1 is a container database.
2. COMMON_USER_PREFIX is set to an empty string.
3. PDB1 is a pluggable database in CDB1.
4. APP1_ROOT is an application container in CDB1.
5. APP1_PDB1 is an application PDB in APP1_ROOT.
You execute these commands:
$ sqlplus sys/oracle@localhost:1521/cdb1 as sysdba
SQL> CREATE ROLE role1 CONTAINER=CURRENT;
What is true?
The command will return an error because creation of a local role is not allowed in the CDB$ROOT container. In a multitenant architecture, to create a local role, you must be connected to a pluggable database (PDB), not the root container.
A correct
From the tests: ORA-65049: Creation of local user or role is not allowed in this container. Cause: An attempt was made to create a local user or role in CDB$ROOT or an application root. Action: If trying to create a common user or role, specify CONTAINER=ALL.
SQL> alter system set common_user_prefix='' scope=spfile; System altered. SQL> shut immediate Database closed. Database dismounted. ORACLE instance shut down. SQL> startup ORACLE instance started. Total System Global Area 960495072 bytes Fixed Size 9141728 bytes Variable Size 306184192 bytes Database Buffers 637534208 bytes Redo Buffers 7634944 bytes Database mounted. Database opened. SQL> show parameter prefix NAME TYPE VALUE ------------------------------------ ----------- ------------------------------ common_user_prefix string os_authent_prefix string ops$ private_temp_table_prefix string ORA$PTT_ SQL> SQL> SQL> create role role1 container=current; create role role1 container=current * ERROR at line 1: ORA-65049: Creation of local user or role is not allowed in this container SQL>
Correct answer is A. You cannot execute create role statement with CONTAINER=CURRENT from CDB$ROOT CONTAINER Clause The CONTAINER clause applies when you are connected to a CDB. However, it is not necessary to specify the CONTAINER clause because its default values are the only allowed values. To create a common role, you must be connected to the root. You can optionally specify CONTAINER = ALL, which is the default when you are connected to the root. To create a local role, you must be connected to a PDB. You can optionally specify CONTAINER = CURRENT, which is the default when you are connected to a PDB.
Agree, A is correct: SQL> create role testrole container=current; create role testrole container=current * ERROR at line 1: ORA-65049: Creation of local user or role is not allowed in this container.
A 100% Tested in lab alter system set common_user_prefix = '' scope = spfile; start force; create role role1 container=current; ERROR at line 1: ORA-65049: Creation of local user or role is not allowed in this container.
A correct test
Should be D If COMMON_USER_PREFIX is set to an empty string, Oracle will not enforce any restrictions on the names of common or local users, roles, and profiles. Setting this parameter to an empty string will result in no restrictions being placed on names of common and local users, roles, and profiles
Agree with you. If COMMON_USER_PREFIX is set to an empty string, Oracle will not enforce any restrictions on the names of common or local users, roles, and profiles. Setting this parameter to an empty string will result in no restrictions being placed on names of common and local users, roles, and profiles, which could lead to conflicts between the names of local and common users, roles, and profiles when a PDB is plugged into a different CDB, or when opening a PDB that was closed when a common user was created. https://docs.oracle.com/en/database/oracle/oracle-database/19/refrn/COMMON_USER_PREFIX.html#GUID-516ADCCF-3661-4B54-908A-7041854EA14F
set the parameter and try it )
It says there are no restrictions to the name used, not if the user can be created or not
To specify the CONTAINER clause, you must be connected to a multitenant container database (CDB). To specify CONTAINER = ALL, the current container must be the root. To specify CONTAINER = CURRENT, the current container must be a pluggable database (PDB).
tested
ERROR at line 1: ORA-65049: Creation of local user or role is not allowed in this container
E Due to lack of C##
Consider the word "must" in answer E. Common roles CAN start with C##, so answer A is correct not E as you wrote.
the command should work no as COMMON_USER_PREFIX is set set to empty string? So I think A is false