grant create session to c##usr1; create role c##admin container=all; grant select any table to c##admin; grant c##admin to c##usr1;