Oracle Database Security Assessment

Latest comprehensive patch: Jan 16 2018 (47 days ago)

Binary Patch Inventory:
Patch ID (Comprehensive): 21862470 (created January 2018)

SQL Patch History:
Action time: Sun Mar 04 2018 16:06:00
Action: APPLY
Version: 12.2.0.1
Bundle series: DBRU
Description: DATABASE RELEASE UPDATE 12.2.0.1.180116

Action time: Sun Mar 04 2018 16:06:00
Action: APPLY
Version: 12.2.0.1
Bundle series:
Description: OJVM RELEASE UPDATE: 12.2.0.1.180116 (27001739)

SEC_CASE_SENSITIVE_LOGON=TRUE

SQLNET.ALLOWED_LOGON_VERSION_SERVER is not set (default value = 12).
    Recommended value is 12a.

Database supports password versions up to 12C.
Users requiring updated password verifiers: (none)

Users with HTTP verifiers: (none)

SEC_MAX_FAILED_LOGIN_ATTEMPTS=3
RESOURCE_LIMIT=TRUE

PASSWORD_LIFE_TIME:
Profiles with limited password lifetime: DEFAULT(180), GSM_PROF(180),
    ORA_STIG_PROFILE(60)
Profiles with unlimited password lifetime: (none)
Users with unlimited password lifetime: (none)

PASSWORD_REUSE_MAX:
Profiles with limits on password reuse: ORA_STIG_PROFILE(10)
Profiles without limits on password reuse: DEFAULT, GSM_PROF
Users without limits on password reuse: ORACHKCM, SYS, SYSTEM

PASSWORD_REUSE_TIME:
Profiles with minimum time before password reuse: ORA_STIG_PROFILE(365)
Profiles without minimum time before password reuse: DEFAULT, GSM_PROF
Users without minimum time before password reuse: ORACHKCM, SYS, SYSTEM

PASSWORD_GRACE_TIME:
Profiles with locking after password expiration: DEFAULT(7), GSM_PROF(7),
    ORA_STIG_PROFILE(5)
Profiles without locking after password expiration: (none)
Users without locking after password expiration: (none)

FAILED_LOGIN_ATTEMPTS:
Profiles with limited failed login attempts: DEFAULT(10),
    GSM_PROF(10000000), ORA_STIG_PROFILE(3)
Profiles with unlimited failed login attempts: (none)
Users with unlimited failed login attempts: (none)

PASSWORD_LOCK_TIME:
Profiles with minimum lock time: DEFAULT(1), GSM_PROF(1)
Profiles without minimum lock time: ORA_STIG_PROFILE
Users without minimum lock time: (none)

Profiles with password verification function:
    ORA_STIG_PROFILE(ORA12C_STIG_VERIFY_FUNCTION)
Profiles without password verification function: DEFAULT, GSM_PROF
Users without password verification function: ORACHKCM, SYS, SYSTEM

Users directly or indirectly granted each system privilege:

ADMINISTER ANY SQL TUNING SET: SYSTEM
ADMINISTER DATABASE TRIGGER: SYSTEM
ADMINISTER KEY MANAGEMENT: (none)
ADMINISTER RESOURCE MANAGER: SYSTEM
ADMINISTER SQL MANAGEMENT OBJECT: SYSTEM
ADMINISTER SQL TUNING SET: SYSTEM
ADVISOR: SYSTEM
ALTER ANY ANALYTIC VIEW: SYSTEM
ALTER ANY ASSEMBLY: SYSTEM
ALTER ANY ATTRIBUTE DIMENSION: SYSTEM
ALTER ANY CLUSTER: SYSTEM
ALTER ANY CUBE: SYSTEM
ALTER ANY CUBE BUILD PROCESS: SYSTEM
ALTER ANY CUBE DIMENSION: SYSTEM
ALTER ANY DIMENSION: SYSTEM
ALTER ANY EDITION: SYSTEM
ALTER ANY EVALUATION CONTEXT: SYSTEM
ALTER ANY HIERARCHY: SYSTEM
ALTER ANY INDEX: SYSTEM
ALTER ANY INDEXTYPE: SYSTEM
ALTER ANY LIBRARY: SYSTEM
ALTER ANY MATERIALIZED VIEW: SYSTEM
ALTER ANY MEASURE FOLDER: SYSTEM
ALTER ANY MINING MODEL: SYSTEM
ALTER ANY OPERATOR: SYSTEM
ALTER ANY OUTLINE: SYSTEM
ALTER ANY PROCEDURE: SYSTEM
ALTER ANY ROLE: SYSTEM
ALTER ANY RULE: SYSTEM
ALTER ANY RULE SET: SYSTEM
ALTER ANY SEQUENCE: SYSTEM
ALTER ANY SQL PROFILE: SYSTEM
ALTER ANY SQL TRANSLATION PROFILE: SYSTEM
ALTER ANY TABLE: SYSTEM
ALTER ANY TRIGGER: SYSTEM
ALTER ANY TYPE: SYSTEM
ALTER DATABASE: SYSTEM
ALTER LOCKDOWN PROFILE: SYSTEM
ALTER PROFILE: SYSTEM
ALTER RESOURCE COST: SYSTEM
ALTER ROLLBACK SEGMENT: SYSTEM
ALTER SESSION: SYSTEM
ALTER SYSTEM: SYSTEM
ALTER TABLESPACE: SYSTEM
ALTER USER: SYSTEM
ANALYZE ANY: SYSTEM
ANALYZE ANY DICTIONARY: SYSTEM
AUDIT ANY: SYSTEM
AUDIT SYSTEM: SYSTEM
BACKUP ANY TABLE: SYSTEM
BECOME USER: SYSTEM
CHANGE NOTIFICATION: SYSTEM
COMMENT ANY MINING MODEL: SYSTEM
COMMENT ANY TABLE: SYSTEM
CREATE ANALYTIC VIEW: SYSTEM
CREATE ANY ANALYTIC VIEW: SYSTEM
CREATE ANY ASSEMBLY: SYSTEM
CREATE ANY ATTRIBUTE DIMENSION: SYSTEM
CREATE ANY CLUSTER: SYSTEM
CREATE ANY CONTEXT: SYSTEM
CREATE ANY CREDENTIAL: SYSTEM(*)
CREATE ANY CUBE: SYSTEM
CREATE ANY CUBE BUILD PROCESS: SYSTEM
CREATE ANY CUBE DIMENSION: SYSTEM
CREATE ANY DIMENSION: SYSTEM
CREATE ANY DIRECTORY: SYSTEM
CREATE ANY EDITION: SYSTEM
CREATE ANY EVALUATION CONTEXT: SYSTEM
CREATE ANY HIERARCHY: SYSTEM
CREATE ANY INDEX: SYSTEM
CREATE ANY INDEXTYPE: SYSTEM
CREATE ANY JOB: SYSTEM(*)
CREATE ANY LIBRARY: SYSTEM
CREATE ANY MATERIALIZED VIEW: SYSTEM
CREATE ANY MEASURE FOLDER: SYSTEM
CREATE ANY MINING MODEL: SYSTEM
CREATE ANY OPERATOR: SYSTEM
CREATE ANY OUTLINE: SYSTEM
CREATE ANY PROCEDURE: SYSTEM
CREATE ANY RULE: SYSTEM
CREATE ANY RULE SET: SYSTEM
CREATE ANY SEQUENCE: SYSTEM
CREATE ANY SQL PROFILE: SYSTEM
CREATE ANY SQL TRANSLATION PROFILE: SYSTEM
CREATE ANY SYNONYM: SYSTEM
CREATE ANY TABLE: SYSTEM
CREATE ANY TRIGGER: SYSTEM
CREATE ANY TYPE: SYSTEM
CREATE ANY VIEW: SYSTEM
CREATE ASSEMBLY: SYSTEM
CREATE ATTRIBUTE DIMENSION: SYSTEM
CREATE CLUSTER: ORACHKCM, SYSTEM
CREATE CREDENTIAL: SYSTEM(*)
CREATE CUBE: SYSTEM
CREATE CUBE BUILD PROCESS: SYSTEM
CREATE CUBE DIMENSION: SYSTEM
CREATE DATABASE LINK: SYSTEM
CREATE DIMENSION: SYSTEM
CREATE EVALUATION CONTEXT: SYSTEM(*)
CREATE EXTERNAL JOB: SYSTEM(*)
CREATE HIERARCHY: SYSTEM
CREATE INDEXTYPE: ORACHKCM, SYSTEM
CREATE JOB: ORACHKCM, SYSTEM(*)
CREATE LIBRARY: SYSTEM
CREATE LOCKDOWN PROFILE: SYSTEM
CREATE MATERIALIZED VIEW: SYSTEM
CREATE MEASURE FOLDER: SYSTEM
CREATE MINING MODEL: SYSTEM
CREATE OPERATOR: ORACHKCM, SYSTEM
CREATE PLUGGABLE DATABASE: SYSTEM
CREATE PROCEDURE: ORACHKCM, SYSTEM
CREATE PROFILE: SYSTEM
CREATE PUBLIC DATABASE LINK: SYSTEM
CREATE PUBLIC SYNONYM: SYSTEM
CREATE ROLE: SYSTEM
CREATE ROLLBACK SEGMENT: SYSTEM
CREATE RULE: SYSTEM(*)
CREATE RULE SET: SYSTEM(*)
CREATE SEQUENCE: ORACHKCM, SYSTEM
CREATE SESSION: ORACHKCM, SYSTEM
CREATE SQL TRANSLATION PROFILE: SYSTEM
CREATE SYNONYM: SYSTEM
CREATE TABLE: ORACHKCM, SYSTEM
CREATE TABLESPACE: SYSTEM
CREATE TRIGGER: ORACHKCM, SYSTEM
CREATE TYPE: ORACHKCM, SYSTEM
CREATE USER: SYSTEM
CREATE VIEW: ORACHKCM, SYSTEM
DEBUG ANY PROCEDURE: SYSTEM
DEBUG CONNECT ANY: SYSTEM
DEBUG CONNECT SESSION: SYSTEM
DELETE ANY CUBE DIMENSION: SYSTEM
DELETE ANY MEASURE FOLDER: SYSTEM
DELETE ANY TABLE: SYSTEM
DEQUEUE ANY QUEUE: SYSTEM(*)
DROP ANY ANALYTIC VIEW: SYSTEM
DROP ANY ASSEMBLY: SYSTEM
DROP ANY ATTRIBUTE DIMENSION: SYSTEM
DROP ANY CLUSTER: SYSTEM
DROP ANY CONTEXT: SYSTEM
DROP ANY CUBE: SYSTEM
DROP ANY CUBE BUILD PROCESS: SYSTEM
DROP ANY CUBE DIMENSION: SYSTEM
DROP ANY DIMENSION: SYSTEM
DROP ANY DIRECTORY: SYSTEM
DROP ANY EDITION: SYSTEM
DROP ANY EVALUATION CONTEXT: SYSTEM
DROP ANY HIERARCHY: SYSTEM
DROP ANY INDEX: SYSTEM
DROP ANY INDEXTYPE: SYSTEM
DROP ANY LIBRARY: SYSTEM
DROP ANY MATERIALIZED VIEW: SYSTEM
DROP ANY MEASURE FOLDER: SYSTEM
DROP ANY MINING MODEL: SYSTEM
DROP ANY OPERATOR: SYSTEM
DROP ANY OUTLINE: SYSTEM
DROP ANY PROCEDURE: SYSTEM
DROP ANY ROLE: SYSTEM
DROP ANY RULE: SYSTEM
DROP ANY RULE SET: SYSTEM
DROP ANY SEQUENCE: SYSTEM
DROP ANY SQL PROFILE: SYSTEM
DROP ANY SQL TRANSLATION PROFILE: SYSTEM
DROP ANY SYNONYM: SYSTEM
DROP ANY TABLE: SYSTEM
DROP ANY TRIGGER: SYSTEM
DROP ANY TYPE: SYSTEM
DROP ANY VIEW: SYSTEM
DROP LOCKDOWN PROFILE: SYSTEM
DROP PROFILE: SYSTEM
DROP PUBLIC DATABASE LINK: SYSTEM
DROP PUBLIC SYNONYM: SYSTEM
DROP ROLLBACK SEGMENT: SYSTEM
DROP TABLESPACE: SYSTEM
DROP USER: SYSTEM
EM EXPRESS CONNECT: SYSTEM
ENQUEUE ANY QUEUE: SYSTEM(*)
EXECUTE ANY ASSEMBLY: SYSTEM
EXECUTE ANY CLASS: SYSTEM(*)
EXECUTE ANY EVALUATION CONTEXT: SYSTEM
EXECUTE ANY INDEXTYPE: SYSTEM
EXECUTE ANY LIBRARY: SYSTEM
EXECUTE ANY OPERATOR: SYSTEM
EXECUTE ANY PROCEDURE: SYSTEM
EXECUTE ANY PROGRAM: SYSTEM(*)
EXECUTE ANY RULE: SYSTEM
EXECUTE ANY RULE SET: SYSTEM
EXECUTE ANY TYPE: SYSTEM
EXECUTE ASSEMBLY: SYSTEM
EXEMPT DDL REDACTION POLICY: SYSTEM
EXEMPT DML REDACTION POLICY: SYSTEM
EXEMPT REDACTION POLICY: SYSTEM
EXPORT FULL DATABASE: SYSTEM
FLASHBACK ANY TABLE: SYSTEM
FLASHBACK ARCHIVE ADMINISTER: SYSTEM
FORCE ANY TRANSACTION: SYSTEM
FORCE TRANSACTION: SYSTEM
GLOBAL QUERY REWRITE: SYSTEM
GRANT ANY OBJECT PRIVILEGE: SYSTEM
GRANT ANY PRIVILEGE: SYSTEM
GRANT ANY ROLE: SYSTEM
IMPORT FULL DATABASE: SYSTEM
INHERIT ANY PRIVILEGES: (none)
INSERT ANY CUBE DIMENSION: SYSTEM
INSERT ANY MEASURE FOLDER: SYSTEM
INSERT ANY TABLE: SYSTEM
LOCK ANY TABLE: SYSTEM
LOGMINING: SYSTEM
MANAGE ANY FILE GROUP: SYSTEM
MANAGE ANY QUEUE: SYSTEM(*)
MANAGE FILE GROUP: SYSTEM
MANAGE SCHEDULER: SYSTEM(*)
MANAGE TABLESPACE: SYSTEM
MERGE ANY VIEW: SYSTEM
ON COMMIT REFRESH: SYSTEM
QUERY REWRITE: SYSTEM
READ ANY FILE GROUP: SYSTEM
READ ANY TABLE: SYSTEM
REDEFINE ANY TABLE: SYSTEM
RESTRICTED SESSION: SYSTEM
RESUMABLE: SYSTEM
SELECT ANY CUBE: SYSTEM
SELECT ANY CUBE BUILD PROCESS: SYSTEM
SELECT ANY CUBE DIMENSION: SYSTEM
SELECT ANY DICTIONARY: SYSTEM
SELECT ANY MEASURE FOLDER: SYSTEM
SELECT ANY MINING MODEL: SYSTEM
SELECT ANY SEQUENCE: SYSTEM
SELECT ANY TABLE: SYSTEM
SELECT ANY TRANSACTION: SYSTEM
SET CONTAINER: ORACHKCM, SYSTEM
UNDER ANY TABLE: SYSTEM
UNDER ANY TYPE: SYSTEM
UNDER ANY VIEW: SYSTEM
UNLIMITED TABLESPACE: SYSTEM
UPDATE ANY CUBE: SYSTEM
UPDATE ANY CUBE BUILD PROCESS: SYSTEM
UPDATE ANY CUBE DIMENSION: SYSTEM
UPDATE ANY TABLE: SYSTEM
USE ANY JOB RESOURCE: SYSTEM
USE ANY SQL TRANSLATION PROFILE: SYSTEM

(*) = granted with admin option

Users directly or indirectly granted each role:

AQ_ADMINISTRATOR_ROLE: SYSTEM
CAPTURE_ADMIN: SYSTEM
CDB_DBA: (none)
CONNECT: ORACHKCM
CTXAPP: (none)
DATAPUMP_EXP_FULL_DATABASE: SYSTEM
DATAPUMP_IMP_FULL_DATABASE: SYSTEM
DBA: SYSTEM
DBFS_ROLE: (none)
EM_EXPRESS_ALL: SYSTEM
EM_EXPRESS_BASIC: SYSTEM
EXECUTE_CATALOG_ROLE: SYSTEM
EXP_FULL_DATABASE: SYSTEM
GATHER_SYSTEM_STATISTICS: SYSTEM
GSMADMIN_ROLE: (none)
GSMUSER_ROLE: (none)
GSM_POOLADMIN_ROLE: (none)
HS_ADMIN_EXECUTE_ROLE: SYSTEM
HS_ADMIN_SELECT_ROLE: SYSTEM
IMP_FULL_DATABASE: SYSTEM
JAVAUSERPRIV: (none)
JAVA_ADMIN: SYSTEM
JAVA_DEPLOY: SYSTEM
OEM_MONITOR: (none)
OLAP_DBA: SYSTEM
OLAP_XS_ADMIN: SYSTEM
OPTIMIZER_PROCESSING_RATE: SYSTEM
RECOVERY_CATALOG_OWNER: (none)
RECOVERY_CATALOG_USER: (none)
RESOURCE: ORACHKCM
SCHEDULER_ADMIN: SYSTEM
SELECT_CATALOG_ROLE: SYSTEM
SODA_APP: ORACHKCM
SYSUMF_ROLE: (none)
WM_ADMIN_ROLE: SYSTEM
XDBADMIN: SYSTEM
XDB_SET_INVOKER: SYSTEM

Grants of ALTER USER, CREATE USER, DROP USER:

SYSTEM <- DBA: ALTER USER, CREATE USER, DROP USER
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: ALTER USER
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    ALTER USER, CREATE USER, DROP USER
SYSTEM <- DBA <- EM_EXPRESS_ALL: ALTER USER, CREATE USER, DROP USER
SYSTEM <- DBA <- IMP_FULL_DATABASE: ALTER USER, CREATE USER, DROP
    USER

Grants of ALTER ANY ROLE, CREATE ROLE, DROP ANY ROLE, GRANT ANY OBJECT
    PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE:

SYSTEM <- DBA: ALTER ANY ROLE, CREATE ROLE, DROP ANY ROLE, GRANT ANY
    OBJECT PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: GRANT ANY OBJECT
    PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    CREATE ROLE, DROP ANY ROLE, GRANT ANY OBJECT PRIVILEGE, GRANT ANY
    PRIVILEGE, GRANT ANY ROLE
SYSTEM <- DBA <- EM_EXPRESS_ALL: ALTER ANY ROLE, CREATE ROLE, DROP
    ANY ROLE, GRANT ANY OBJECT PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY
    ROLE
SYSTEM <- DBA <- IMP_FULL_DATABASE: CREATE ROLE, DROP ANY ROLE, GRANT
    ANY OBJECT PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE

Grants of ALTER DATABASE, ALTER SYSTEM, CREATE ANY LIBRARY, CREATE LIBRARY:

SYSTEM <- DBA: ALTER DATABASE, ALTER SYSTEM, CREATE ANY LIBRARY, CREATE
    LIBRARY
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: ALTER DATABASE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    ALTER DATABASE, CREATE ANY LIBRARY
SYSTEM <- DBA <- EM_EXPRESS_ALL: ALTER SYSTEM
SYSTEM <- DBA <- IMP_FULL_DATABASE: ALTER DATABASE, CREATE ANY
    LIBRARY

(no users) <- GSMADMIN_ROLE: ALTER SYSTEM

Grants of AUDIT ANY, AUDIT SYSTEM:

SYSTEM <- DBA: AUDIT ANY, AUDIT SYSTEM
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: AUDIT ANY, AUDIT SYSTEM
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    AUDIT ANY, AUDIT SYSTEM
SYSTEM <- DBA <- IMP_FULL_DATABASE: AUDIT ANY, AUDIT SYSTEM

(no users) <- AUDIT_ADMIN: AUDIT ANY, AUDIT SYSTEM

Grants of ALTER ANY TABLE, ALTER ANY TRIGGER, CREATE ANY INDEX, CREATE ANY
    PROCEDURE, CREATE ANY TRIGGER, DELETE ANY TABLE, INSERT ANY TABLE, READ
    ANY TABLE, SELECT ANY DICTIONARY, SELECT ANY TABLE, UPDATE ANY TABLE:

SYSTEM: SELECT ANY TABLE
SYSTEM <- DBA: ALTER ANY TABLE, ALTER ANY TRIGGER, CREATE ANY INDEX,
    CREATE ANY PROCEDURE, CREATE ANY TRIGGER, DELETE ANY TABLE, INSERT ANY
    TABLE, READ ANY TABLE, SELECT ANY DICTIONARY, SELECT ANY TABLE, UPDATE
    ANY TABLE
SYSTEM <- DBA <- DATAPUMP_EXP_FULL_DATABASE <- EXP_FULL_DATABASE:
    SELECT ANY TABLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: DELETE ANY TABLE, SELECT
    ANY TABLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- EXP_FULL_DATABASE:
    SELECT ANY TABLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    ALTER ANY TABLE, ALTER ANY TRIGGER, CREATE ANY INDEX, CREATE ANY
    PROCEDURE, CREATE ANY TRIGGER, DELETE ANY TABLE, INSERT ANY TABLE,
    SELECT ANY TABLE, UPDATE ANY TABLE
SYSTEM <- DBA <- EXP_FULL_DATABASE: SELECT ANY TABLE
SYSTEM <- DBA <- IMP_FULL_DATABASE: ALTER ANY TABLE, ALTER ANY
    TRIGGER, CREATE ANY INDEX, CREATE ANY PROCEDURE, CREATE ANY TRIGGER,
    DELETE ANY TABLE, INSERT ANY TABLE, SELECT ANY TABLE, UPDATE ANY TABLE
SYSTEM <- DBA <- OLAP_DBA: DELETE ANY TABLE, INSERT ANY TABLE, SELECT
    ANY TABLE, UPDATE ANY TABLE

(no users) <- OEM_MONITOR: SELECT ANY DICTIONARY

Grants of EXEMPT ACCESS POLICY, EXEMPT REDACTION POLICY:

SYSTEM <- DBA <- DATAPUMP_EXP_FULL_DATABASE <- EXP_FULL_DATABASE:
    EXEMPT REDACTION POLICY
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- EXP_FULL_DATABASE:
    EXEMPT REDACTION POLICY
SYSTEM <- DBA <- EXP_FULL_DATABASE: EXEMPT REDACTION POLICY

Grants of DELETE, INSERT, UPDATE on SYS, DVSYS, or LBACSYS objects:

SYSTEM <- DBA: INSERT on SYS.XSDB$SCHEMA_ACL, UPDATE on
    SYS.XSDB$SCHEMA_ACL
SYSTEM <- DBA <- DATAPUMP_EXP_FULL_DATABASE <- EXP_FULL_DATABASE:
    DELETE on SYS.INCEXP, DELETE on SYS.INCFIL, DELETE on SYS.INCVID,
    INSERT on SYS.INCEXP, INSERT on SYS.INCFIL, INSERT on SYS.INCVID,
    UPDATE on SYS.INCEXP, UPDATE on SYS.INCFIL, UPDATE on SYS.INCVID
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- EXP_FULL_DATABASE:
    DELETE on SYS.INCEXP, DELETE on SYS.INCFIL, DELETE on SYS.INCVID,
    INSERT on SYS.INCEXP, INSERT on SYS.INCFIL, INSERT on SYS.INCVID,
    UPDATE on SYS.INCEXP, UPDATE on SYS.INCFIL, UPDATE on SYS.INCVID
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    DELETE on SYS.EXPIMP_TTS_CT$, DELETE on SYS.RADM_FPTM$, INSERT on
    SYS.EXPIMP_TTS_CT$, INSERT on SYS.RADM_FPTM$, UPDATE on
    SYS.EXPIMP_TTS_CT$
SYSTEM <- DBA <- EXP_FULL_DATABASE: DELETE on SYS.INCEXP, DELETE on
    SYS.INCFIL, DELETE on SYS.INCVID, INSERT on SYS.INCEXP, INSERT on
    SYS.INCFIL, INSERT on SYS.INCVID, UPDATE on SYS.INCEXP, UPDATE on
    SYS.INCFIL, UPDATE on SYS.INCVID
SYSTEM <- DBA <- GATHER_SYSTEM_STATISTICS: DELETE on SYS.AUX_STATS$,
    DELETE on SYS.WRI$_OPTSTAT_AUX_HISTORY, INSERT on SYS.AUX_STATS$,
    INSERT on SYS.WRI$_OPTSTAT_AUX_HISTORY, UPDATE on SYS.AUX_STATS$,
    UPDATE on SYS.WRI$_OPTSTAT_AUX_HISTORY
SYSTEM <- DBA <- IMP_FULL_DATABASE: DELETE on SYS.EXPIMP_TTS_CT$,
    DELETE on SYS.RADM_FPTM$, INSERT on SYS.EXPIMP_TTS_CT$, INSERT on
    SYS.RADM_FPTM$, UPDATE on SYS.EXPIMP_TTS_CT$
SYSTEM <- DBA <- OPTIMIZER_PROCESSING_RATE: DELETE on
    SYS.OPT_CALIBRATION_STATS$, INSERT on SYS.OPT_CALIBRATION_STATS$,
    UPDATE on SYS.OPT_CALIBRATION_STATS$

(no users) <- SYSUMF_ROLE: DELETE on SYS.UMF$_LINK, DELETE on
    SYS.UMF$_REGISTRATION, DELETE on SYS.UMF$_SERVICE, DELETE on
    SYS.UMF$_TOPOLOGY, DELETE on SYS.WRH$_ACTIVE_SESSION_HISTORY, DELETE on
    SYS.WRH$_ASM_BAD_DISK, DELETE on SYS.WRH$_ASM_DISKGROUP, DELETE on
    SYS.WRH$_ASM_DISKGROUP_STAT, DELETE on SYS.WRH$_BG_EVENT_SUMMARY,
    DELETE on SYS.WRH$_BUFFERED_QUEUES, DELETE on
    SYS.WRH$_BUFFERED_SUBSCRIBERS, DELETE on
    SYS.WRH$_BUFFER_POOL_STATISTICS, DELETE on SYS.WRH$_CELL_CONFIG, DELETE
    on SYS.WRH$_CELL_CONFIG_DETAIL, DELETE on SYS.WRH$_CELL_DB, DELETE on
    SYS.WRH$_CELL_DISK_SUMMARY, DELETE on SYS.WRH$_CELL_GLOBAL, DELETE on
    SYS.WRH$_CELL_GLOBAL_SUMMARY, DELETE on SYS.WRH$_CELL_IOREASON, DELETE
    on SYS.WRH$_CELL_IOREASON_NAME, DELETE on SYS.WRH$_CELL_METRIC_DESC,
    DELETE on SYS.WRH$_CELL_OPEN_ALERTS, DELETE on SYS.WRH$_CHANNEL_WAITS,
    DELETE on SYS.WRH$_CLUSTER_INTERCON, DELETE on SYS.WRH$_COMP_IOSTAT,
    DELETE on SYS.WRH$_CON_SYSMETRIC_HISTORY, DELETE on
    SYS.WRH$_CON_SYSMETRIC_SUMMARY, DELETE on SYS.WRH$_CON_SYSSTAT, DELETE
    on SYS.WRH$_CON_SYSTEM_EVENT, DELETE on SYS.WRH$_CON_SYS_TIME_MODEL,
    DELETE on SYS.WRH$_CR_BLOCK_SERVER, DELETE on
    SYS.WRH$_CURRENT_BLOCK_SERVER, DELETE on SYS.WRH$_DATAFILE, DELETE on
    SYS.WRH$_DB_CACHE_ADVICE, DELETE on SYS.WRH$_DISPATCHER, DELETE on
    SYS.WRH$_DLM_MISC, DELETE on SYS.WRH$_DYN_REMASTER_STATS, DELETE on
    SYS.WRH$_ENQUEUE_STAT, DELETE on SYS.WRH$_EVENT_HISTOGRAM, DELETE on
    SYS.WRH$_EVENT_NAME, DELETE on SYS.WRH$_FILEMETRIC_HISTORY, DELETE on
    SYS.WRH$_FILESTATXS, DELETE on SYS.WRH$_IC_CLIENT_STATS, DELETE on
    SYS.WRH$_IC_DEVICE_STATS, DELETE on SYS.WRH$_IM_SEG_STAT, DELETE on
    SYS.WRH$_IM_SEG_STAT_OBJ, DELETE on SYS.WRH$_INSTANCE_RECOVERY, DELETE
    on SYS.WRH$_INST_CACHE_TRANSFER, DELETE on SYS.WRH$_INTERCONNECT_PINGS,
    DELETE on SYS.WRH$_IOSTAT_DETAIL, DELETE on SYS.WRH$_IOSTAT_FILETYPE,
    DELETE on SYS.WRH$_IOSTAT_FILETYPE_NAME, DELETE on
    SYS.WRH$_IOSTAT_FUNCTION, DELETE on SYS.WRH$_IOSTAT_FUNCTION_NAME,
    DELETE on SYS.WRH$_JAVA_POOL_ADVICE, DELETE on SYS.WRH$_LATCH, DELETE
    on SYS.WRH$_LATCH_CHILDREN, DELETE on SYS.WRH$_LATCH_MISSES_SUMMARY,
    DELETE on SYS.WRH$_LATCH_NAME, DELETE on SYS.WRH$_LATCH_PARENT, DELETE
    on SYS.WRH$_LIBRARYCACHE, DELETE on SYS.WRH$_LMS_STATS, DELETE on
    SYS.WRH$_LOG, DELETE on SYS.WRH$_MEMORY_RESIZE_OPS, DELETE on
    SYS.WRH$_MEMORY_TARGET_ADVICE, DELETE on SYS.WRH$_MEM_DYNAMIC_COMP,
    DELETE on SYS.WRH$_METRIC_NAME, DELETE on SYS.WRH$_MTTR_TARGET_ADVICE,
    DELETE on SYS.WRH$_MUTEX_SLEEP, DELETE on SYS.WRH$_MVPARAMETER, DELETE
    on SYS.WRH$_OPTIMIZER_ENV, DELETE on SYS.WRH$_OSSTAT, DELETE on
    SYS.WRH$_OSSTAT_NAME, DELETE on SYS.WRH$_PARAMETER, DELETE on
    SYS.WRH$_PARAMETER_NAME, DELETE on SYS.WRH$_PERSISTENT_QMN_CACHE,
    DELETE on SYS.WRH$_PERSISTENT_QUEUES, DELETE on
    SYS.WRH$_PERSISTENT_SUBSCRIBERS, DELETE on SYS.WRH$_PGASTAT, DELETE on
    SYS.WRH$_PGA_TARGET_ADVICE, DELETE on SYS.WRH$_PLAN_OPERATION_NAME,
    DELETE on SYS.WRH$_PLAN_OPTION_NAME, DELETE on
    SYS.WRH$_PROCESS_MEMORY_SUMMARY, DELETE on SYS.WRH$_RECOVERY_PROGRESS,
    DELETE on SYS.WRH$_REPLICATION_TBL_STATS, DELETE on
    SYS.WRH$_REPLICATION_TXN_STATS, DELETE on SYS.WRH$_RESOURCE_LIMIT,
    DELETE on SYS.WRH$_ROWCACHE_SUMMARY, DELETE on
    SYS.WRH$_RSRC_CONSUMER_GROUP, DELETE on SYS.WRH$_RSRC_METRIC, DELETE on
    SYS.WRH$_RSRC_PDB_METRIC, DELETE on SYS.WRH$_RSRC_PLAN, DELETE on
    SYS.WRH$_RULE_SET, DELETE on SYS.WRH$_SEG_STAT, DELETE on
    SYS.WRH$_SEG_STAT_OBJ, DELETE on SYS.WRH$_SERVICE_NAME, DELETE on
    SYS.WRH$_SERVICE_STAT, DELETE on SYS.WRH$_SERVICE_WAIT_CLASS, DELETE on
    SYS.WRH$_SESSMETRIC_HISTORY, DELETE on SYS.WRH$_SESS_SGA_STATS, DELETE
    on SYS.WRH$_SESS_TIME_STATS, DELETE on SYS.WRH$_SGA, DELETE on
    SYS.WRH$_SGASTAT, DELETE on SYS.WRH$_SGA_TARGET_ADVICE, DELETE on
    SYS.WRH$_SHARED_POOL_ADVICE, DELETE on SYS.WRH$_SHARED_SERVER_SUMMARY,
    DELETE on SYS.WRH$_SQLCOMMAND_NAME, DELETE on SYS.WRH$_SQLSTAT, DELETE
    on SYS.WRH$_SQLTEXT, DELETE on SYS.WRH$_SQL_BIND_METADATA, DELETE on
    SYS.WRH$_SQL_PLAN, DELETE on SYS.WRH$_SQL_SUMMARY, DELETE on
    SYS.WRH$_SQL_WORKAREA_HISTOGRAM, DELETE on SYS.WRH$_STAT_NAME, DELETE
    on SYS.WRH$_STREAMS_APPLY_SUM, DELETE on SYS.WRH$_STREAMS_CAPTURE,
    DELETE on SYS.WRH$_STREAMS_POOL_ADVICE, DELETE on
    SYS.WRH$_SYSMETRIC_HISTORY, DELETE on SYS.WRH$_SYSMETRIC_SUMMARY,
    DELETE on SYS.WRH$_SYSSTAT, DELETE on SYS.WRH$_SYSTEM_EVENT, DELETE on
    SYS.WRH$_SYS_TIME_MODEL, DELETE on SYS.WRH$_TABLESPACE, DELETE on
    SYS.WRH$_TABLESPACE_SPACE_USAGE, DELETE on SYS.WRH$_TABLESPACE_STAT,
    DELETE on SYS.WRH$_TEMPFILE, DELETE on SYS.WRH$_TEMPSTATXS, DELETE on
    SYS.WRH$_THREAD, DELETE on SYS.WRH$_TOPLEVELCALL_NAME, DELETE on
    SYS.WRH$_UNDOSTAT, DELETE on SYS.WRH$_WAITCLASSMETRIC_HISTORY, DELETE
    on SYS.WRH$_WAITSTAT, DELETE on SYS.WRHS$_CELL_IOREASON_NAME, DELETE on
    SYS.WRHS$_CELL_METRIC_DESC, DELETE on SYS.WRHS$_DATAFILE, DELETE on
    SYS.WRHS$_EVENT_NAME, DELETE on SYS.WRHS$_IM_SEG_STAT_OBJ, DELETE on
    SYS.WRHS$_IOSTAT_FILETYPE_NAME, DELETE on
    SYS.WRHS$_IOSTAT_FUNCTION_NAME, DELETE on SYS.WRHS$_LATCH_NAME, DELETE
    on SYS.WRHS$_METRIC_NAME, DELETE on SYS.WRHS$_OPTIMIZER_ENV, DELETE on
    SYS.WRHS$_OSSTAT_NAME, DELETE on SYS.WRHS$_PARAMETER_NAME, DELETE on
    SYS.WRHS$_PLAN_OPERATION_NAME, DELETE on SYS.WRHS$_PLAN_OPTION_NAME,
    DELETE on SYS.WRHS$_SEG_STAT_OBJ, DELETE on SYS.WRHS$_SERVICE_NAME,
    DELETE on SYS.WRHS$_SQLCOMMAND_NAME, DELETE on SYS.WRHS$_SQLTEXT,
    DELETE on SYS.WRHS$_SQL_BIND_METADATA, DELETE on SYS.WRHS$_SQL_PLAN,
    DELETE on SYS.WRHS$_STAT_NAME, DELETE on SYS.WRHS$_TABLESPACE, DELETE
    on SYS.WRHS$_TEMPFILE, DELETE on SYS.WRHS$_TOPLEVELCALL_NAME, DELETE on
    SYS.WRI$_ADV_ACTIONS, DELETE on SYS.WRI$_ADV_DEF_PARAMETERS, DELETE on
    SYS.WRI$_ADV_DIRECTIVE_DEFS, DELETE on
    SYS.WRI$_ADV_DIRECTIVE_INSTANCES, DELETE on SYS.WRI$_ADV_EXECUTIONS,
    DELETE on SYS.WRI$_ADV_EXEC_PARAMETERS, DELETE on
    SYS.WRI$_ADV_FINDINGS, DELETE on SYS.WRI$_ADV_INST_FDG, DELETE on
    SYS.WRI$_ADV_JOURNAL, DELETE on SYS.WRI$_ADV_MESSAGE_GROUPS, DELETE on
    SYS.WRI$_ADV_OBJECTS, DELETE on SYS.WRI$_ADV_PARAMETERS, DELETE on
    SYS.WRI$_ADV_RATIONALE, DELETE on SYS.WRI$_ADV_RECOMMENDATIONS, DELETE
    on SYS.WRI$_ADV_REC_ACTIONS, DELETE on SYS.WRI$_ADV_SQLT_BINDS, DELETE
    on SYS.WRI$_ADV_SQLT_PLANS, DELETE on SYS.WRI$_ADV_SQLT_PLAN_HASH,
    DELETE on SYS.WRI$_ADV_SQLT_PLAN_STATS, DELETE on
    SYS.WRI$_ADV_SQLT_RTN_PLAN, DELETE on SYS.WRI$_ADV_SQLT_STATISTICS,
    DELETE on SYS.WRI$_ADV_TASKS, DELETE on SYS.WRI$_ADV_USAGE, DELETE on
    SYS.WRI$_ALERT_HISTORY, DELETE on SYS.WRI$_OPTSTAT_OPR, DELETE on
    SYS.WRI$_SEGADV_CNTRLTAB, DELETE on SYS.WRI$_SEGADV_OBJLIST, DELETE on
    SYS.WRI$_SQLSET_DEFINITIONS, DELETE on SYS.WRI$_SQLSET_REFERENCES,
    DELETE on SYS.WRI$_SQLTEXT_REFCOUNT, DELETE on SYS.WRM$_ACTIVE_PDBS,
    DELETE on SYS.WRM$_BASELINE, DELETE on SYS.WRM$_BASELINE_DETAILS,
    DELETE on SYS.WRM$_BASELINE_TEMPLATE, DELETE on SYS.WRM$_COLORED_SQL,
    DELETE on SYS.WRM$_DATABASE_INSTANCE, DELETE on SYS.WRM$_PDB_INSTANCE,
    DELETE on SYS.WRM$_PDB_IN_SNAP, DELETE on SYS.WRM$_SNAPSHOT, DELETE on
    SYS.WRM$_SNAPSHOT_DETAILS, DELETE on SYS.WRM$_SNAP_ERROR, DELETE on
    SYS.WRM$_WR_CONTROL, DELETE on SYS.WRM$_WR_SETTINGS, DELETE on
    SYS.WRM$_WR_USAGE, DELETE on SYS.WRMS$_SNAPSHOT, INSERT on
    SYS.UMF$_LINK, INSERT on SYS.UMF$_REGISTRATION, INSERT on
    SYS.UMF$_SERVICE, INSERT on SYS.UMF$_TOPOLOGY, INSERT on
    SYS.WRH$_ACTIVE_SESSION_HISTORY, INSERT on SYS.WRH$_ASM_BAD_DISK,
    INSERT on SYS.WRH$_ASM_DISKGROUP, INSERT on
    SYS.WRH$_ASM_DISKGROUP_STAT, INSERT on SYS.WRH$_BG_EVENT_SUMMARY,
    INSERT on SYS.WRH$_BUFFERED_QUEUES, INSERT on
    SYS.WRH$_BUFFERED_SUBSCRIBERS, INSERT on
    SYS.WRH$_BUFFER_POOL_STATISTICS, INSERT on SYS.WRH$_CELL_CONFIG, INSERT
    on SYS.WRH$_CELL_CONFIG_DETAIL, INSERT on SYS.WRH$_CELL_DB, INSERT on
    SYS.WRH$_CELL_DISK_SUMMARY, INSERT on SYS.WRH$_CELL_GLOBAL, INSERT on
    SYS.WRH$_CELL_GLOBAL_SUMMARY, INSERT on SYS.WRH$_CELL_IOREASON, INSERT
    on SYS.WRH$_CELL_IOREASON_NAME, INSERT on SYS.WRH$_CELL_METRIC_DESC,
    INSERT on SYS.WRH$_CELL_OPEN_ALERTS, INSERT on SYS.WRH$_CHANNEL_WAITS,
    INSERT on SYS.WRH$_CLUSTER_INTERCON, INSERT on SYS.WRH$_COMP_IOSTAT,
    INSERT on SYS.WRH$_CON_SYSMETRIC_HISTORY, INSERT on
    SYS.WRH$_CON_SYSMETRIC_SUMMARY, INSERT on SYS.WRH$_CON_SYSSTAT, INSERT
    on SYS.WRH$_CON_SYSTEM_EVENT, INSERT on SYS.WRH$_CON_SYS_TIME_MODEL,
    INSERT on SYS.WRH$_CR_BLOCK_SERVER, INSERT on
    SYS.WRH$_CURRENT_BLOCK_SERVER, INSERT on SYS.WRH$_DATAFILE, INSERT on
    SYS.WRH$_DB_CACHE_ADVICE, INSERT on SYS.WRH$_DISPATCHER, INSERT on
    SYS.WRH$_DLM_MISC, INSERT on SYS.WRH$_DYN_REMASTER_STATS, INSERT on
    SYS.WRH$_ENQUEUE_STAT, INSERT on SYS.WRH$_EVENT_HISTOGRAM, INSERT on
    SYS.WRH$_EVENT_NAME, INSERT on SYS.WRH$_FILEMETRIC_HISTORY, INSERT on
    SYS.WRH$_FILESTATXS, INSERT on SYS.WRH$_IC_CLIENT_STATS, INSERT on
    SYS.WRH$_IC_DEVICE_STATS, INSERT on SYS.WRH$_IM_SEG_STAT, INSERT on
    SYS.WRH$_IM_SEG_STAT_OBJ, INSERT on SYS.WRH$_INSTANCE_RECOVERY, INSERT
    on SYS.WRH$_INST_CACHE_TRANSFER, INSERT on SYS.WRH$_INTERCONNECT_PINGS,
    INSERT on SYS.WRH$_IOSTAT_DETAIL, INSERT on SYS.WRH$_IOSTAT_FILETYPE,
    INSERT on SYS.WRH$_IOSTAT_FILETYPE_NAME, INSERT on
    SYS.WRH$_IOSTAT_FUNCTION, INSERT on SYS.WRH$_IOSTAT_FUNCTION_NAME,
    INSERT on SYS.WRH$_JAVA_POOL_ADVICE, INSERT on SYS.WRH$_LATCH, INSERT
    on SYS.WRH$_LATCH_CHILDREN, INSERT on SYS.WRH$_LATCH_MISSES_SUMMARY,
    INSERT on SYS.WRH$_LATCH_NAME, INSERT on SYS.WRH$_LATCH_PARENT, INSERT
    on SYS.WRH$_LIBRARYCACHE, INSERT on SYS.WRH$_LMS_STATS, INSERT on
    SYS.WRH$_LOG, INSERT on SYS.WRH$_MEMORY_RESIZE_OPS, INSERT on
    SYS.WRH$_MEMORY_TARGET_ADVICE, INSERT on SYS.WRH$_MEM_DYNAMIC_COMP,
    INSERT on SYS.WRH$_METRIC_NAME, INSERT on SYS.WRH$_MTTR_TARGET_ADVICE,
    INSERT on SYS.WRH$_MUTEX_SLEEP, INSERT on SYS.WRH$_MVPARAMETER, INSERT
    on SYS.WRH$_OPTIMIZER_ENV, INSERT on SYS.WRH$_OSSTAT, INSERT on
    SYS.WRH$_OSSTAT_NAME, INSERT on SYS.WRH$_PARAMETER, INSERT on
    SYS.WRH$_PARAMETER_NAME, INSERT on SYS.WRH$_PERSISTENT_QMN_CACHE,
    INSERT on SYS.WRH$_PERSISTENT_QUEUES, INSERT on
    SYS.WRH$_PERSISTENT_SUBSCRIBERS, INSERT on SYS.WRH$_PGASTAT, INSERT on
    SYS.WRH$_PGA_TARGET_ADVICE, INSERT on SYS.WRH$_PLAN_OPERATION_NAME,
    INSERT on SYS.WRH$_PLAN_OPTION_NAME, INSERT on
    SYS.WRH$_PROCESS_MEMORY_SUMMARY, INSERT on SYS.WRH$_RECOVERY_PROGRESS,
    INSERT on SYS.WRH$_REPLICATION_TBL_STATS, INSERT on
    SYS.WRH$_REPLICATION_TXN_STATS, INSERT on SYS.WRH$_RESOURCE_LIMIT,
    INSERT on SYS.WRH$_ROWCACHE_SUMMARY, INSERT on
    SYS.WRH$_RSRC_CONSUMER_GROUP, INSERT on SYS.WRH$_RSRC_METRIC, INSERT on
    SYS.WRH$_RSRC_PDB_METRIC, INSERT on SYS.WRH$_RSRC_PLAN, INSERT on
    SYS.WRH$_RULE_SET, INSERT on SYS.WRH$_SEG_STAT, INSERT on
    SYS.WRH$_SEG_STAT_OBJ, INSERT on SYS.WRH$_SERVICE_NAME, INSERT on
    SYS.WRH$_SERVICE_STAT, INSERT on SYS.WRH$_SERVICE_WAIT_CLASS, INSERT on
    SYS.WRH$_SESSMETRIC_HISTORY, INSERT on SYS.WRH$_SESS_SGA_STATS, INSERT
    on SYS.WRH$_SESS_TIME_STATS, INSERT on SYS.WRH$_SGA, INSERT on
    SYS.WRH$_SGASTAT, INSERT on SYS.WRH$_SGA_TARGET_ADVICE, INSERT on
    SYS.WRH$_SHARED_POOL_ADVICE, INSERT on SYS.WRH$_SHARED_SERVER_SUMMARY,
    INSERT on SYS.WRH$_SQLCOMMAND_NAME, INSERT on SYS.WRH$_SQLSTAT, INSERT
    on SYS.WRH$_SQLTEXT, INSERT on SYS.WRH$_SQL_BIND_METADATA, INSERT on
    SYS.WRH$_SQL_PLAN, INSERT on SYS.WRH$_SQL_SUMMARY, INSERT on
    SYS.WRH$_SQL_WORKAREA_HISTOGRAM, INSERT on SYS.WRH$_STAT_NAME, INSERT
    on SYS.WRH$_STREAMS_APPLY_SUM, INSERT on SYS.WRH$_STREAMS_CAPTURE,
    INSERT on SYS.WRH$_STREAMS_POOL_ADVICE, INSERT on
    SYS.WRH$_SYSMETRIC_HISTORY, INSERT on SYS.WRH$_SYSMETRIC_SUMMARY,
    INSERT on SYS.WRH$_SYSSTAT, INSERT on SYS.WRH$_SYSTEM_EVENT, INSERT on
    SYS.WRH$_SYS_TIME_MODEL, INSERT on SYS.WRH$_TABLESPACE, INSERT on
    SYS.WRH$_TABLESPACE_SPACE_USAGE, INSERT on SYS.WRH$_TABLESPACE_STAT,
    INSERT on SYS.WRH$_TEMPFILE, INSERT on SYS.WRH$_TEMPSTATXS, INSERT on
    SYS.WRH$_THREAD, INSERT on SYS.WRH$_TOPLEVELCALL_NAME, INSERT on
    SYS.WRH$_UNDOSTAT, INSERT on SYS.WRH$_WAITCLASSMETRIC_HISTORY, INSERT
    on SYS.WRH$_WAITSTAT, INSERT on SYS.WRHS$_CELL_IOREASON_NAME, INSERT on
    SYS.WRHS$_CELL_METRIC_DESC, INSERT on SYS.WRHS$_DATAFILE, INSERT on
    SYS.WRHS$_EVENT_NAME, INSERT on SYS.WRHS$_IM_SEG_STAT_OBJ, INSERT on
    SYS.WRHS$_IOSTAT_FILETYPE_NAME, INSERT on
    SYS.WRHS$_IOSTAT_FUNCTION_NAME, INSERT on SYS.WRHS$_LATCH_NAME, INSERT
    on SYS.WRHS$_METRIC_NAME, INSERT on SYS.WRHS$_OPTIMIZER_ENV, INSERT on
    SYS.WRHS$_OSSTAT_NAME, INSERT on SYS.WRHS$_PARAMETER_NAME, INSERT on
    SYS.WRHS$_PLAN_OPERATION_NAME, INSERT on SYS.WRHS$_PLAN_OPTION_NAME,
    INSERT on SYS.WRHS$_SEG_STAT_OBJ, INSERT on SYS.WRHS$_SERVICE_NAME,
    INSERT on SYS.WRHS$_SQLCOMMAND_NAME, INSERT on SYS.WRHS$_SQLTEXT,
    INSERT on SYS.WRHS$_SQL_BIND_METADATA, INSERT on SYS.WRHS$_SQL_PLAN,
    INSERT on SYS.WRHS$_STAT_NAME, INSERT on SYS.WRHS$_TABLESPACE, INSERT
    on SYS.WRHS$_TEMPFILE, INSERT on SYS.WRHS$_TOPLEVELCALL_NAME, INSERT on
    SYS.WRI$_ADV_ACTIONS, INSERT on SYS.WRI$_ADV_DEF_PARAMETERS, INSERT on
    SYS.WRI$_ADV_DIRECTIVE_DEFS, INSERT on
    SYS.WRI$_ADV_DIRECTIVE_INSTANCES, INSERT on SYS.WRI$_ADV_EXECUTIONS,
    INSERT on SYS.WRI$_ADV_EXEC_PARAMETERS, INSERT on
    SYS.WRI$_ADV_FINDINGS, INSERT on SYS.WRI$_ADV_INST_FDG, INSERT on
    SYS.WRI$_ADV_JOURNAL, INSERT on SYS.WRI$_ADV_MESSAGE_GROUPS, INSERT on
    SYS.WRI$_ADV_OBJECTS, INSERT on SYS.WRI$_ADV_PARAMETERS, INSERT on
    SYS.WRI$_ADV_RATIONALE, INSERT on SYS.WRI$_ADV_RECOMMENDATIONS, INSERT
    on SYS.WRI$_ADV_REC_ACTIONS, INSERT on SYS.WRI$_ADV_SQLT_BINDS, INSERT
    on SYS.WRI$_ADV_SQLT_PLANS, INSERT on SYS.WRI$_ADV_SQLT_PLAN_HASH,
    INSERT on SYS.WRI$_ADV_SQLT_PLAN_STATS, INSERT on
    SYS.WRI$_ADV_SQLT_RTN_PLAN, INSERT on SYS.WRI$_ADV_SQLT_STATISTICS,
    INSERT on SYS.WRI$_ADV_TASKS, INSERT on SYS.WRI$_ADV_USAGE, INSERT on
    SYS.WRI$_ALERT_HISTORY, INSERT on SYS.WRI$_OPTSTAT_OPR, INSERT on
    SYS.WRI$_SEGADV_CNTRLTAB, INSERT on SYS.WRI$_SEGADV_OBJLIST, INSERT on
    SYS.WRI$_SQLSET_DEFINITIONS, INSERT on SYS.WRI$_SQLSET_REFERENCES,
    INSERT on SYS.WRI$_SQLTEXT_REFCOUNT, INSERT on SYS.WRM$_ACTIVE_PDBS,
    INSERT on SYS.WRM$_BASELINE, INSERT on SYS.WRM$_BASELINE_DETAILS,
    INSERT on SYS.WRM$_BASELINE_TEMPLATE, INSERT on SYS.WRM$_COLORED_SQL,
    INSERT on SYS.WRM$_DATABASE_INSTANCE, INSERT on SYS.WRM$_PDB_INSTANCE,
    INSERT on SYS.WRM$_PDB_IN_SNAP, INSERT on SYS.WRM$_SNAPSHOT, INSERT on
    SYS.WRM$_SNAPSHOT_DETAILS, INSERT on SYS.WRM$_SNAP_ERROR, INSERT on
    SYS.WRM$_WR_CONTROL, INSERT on SYS.WRM$_WR_SETTINGS, INSERT on
    SYS.WRM$_WR_USAGE, INSERT on SYS.WRMS$_SNAPSHOT, UPDATE on
    SYS.UMF$_LINK, UPDATE on SYS.UMF$_REGISTRATION, UPDATE on
    SYS.UMF$_SERVICE, UPDATE on SYS.UMF$_TOPOLOGY, UPDATE on
    SYS.WRH$_ACTIVE_SESSION_HISTORY, UPDATE on SYS.WRH$_ASM_BAD_DISK,
    UPDATE on SYS.WRH$_ASM_DISKGROUP, UPDATE on
    SYS.WRH$_ASM_DISKGROUP_STAT, UPDATE on SYS.WRH$_BG_EVENT_SUMMARY,
    UPDATE on SYS.WRH$_BUFFERED_QUEUES, UPDATE on
    SYS.WRH$_BUFFERED_SUBSCRIBERS, UPDATE on
    SYS.WRH$_BUFFER_POOL_STATISTICS, UPDATE on SYS.WRH$_CELL_CONFIG, UPDATE
    on SYS.WRH$_CELL_CONFIG_DETAIL, UPDATE on SYS.WRH$_CELL_DB, UPDATE on
    SYS.WRH$_CELL_DISK_SUMMARY, UPDATE on SYS.WRH$_CELL_GLOBAL, UPDATE on
    SYS.WRH$_CELL_GLOBAL_SUMMARY, UPDATE on SYS.WRH$_CELL_IOREASON, UPDATE
    on SYS.WRH$_CELL_IOREASON_NAME, UPDATE on SYS.WRH$_CELL_METRIC_DESC,
    UPDATE on SYS.WRH$_CELL_OPEN_ALERTS, UPDATE on SYS.WRH$_CHANNEL_WAITS,
    UPDATE on SYS.WRH$_CLUSTER_INTERCON, UPDATE on SYS.WRH$_COMP_IOSTAT,
    UPDATE on SYS.WRH$_CON_SYSMETRIC_HISTORY, UPDATE on
    SYS.WRH$_CON_SYSMETRIC_SUMMARY, UPDATE on SYS.WRH$_CON_SYSSTAT, UPDATE
    on SYS.WRH$_CON_SYSTEM_EVENT, UPDATE on SYS.WRH$_CON_SYS_TIME_MODEL,
    UPDATE on SYS.WRH$_CR_BLOCK_SERVER, UPDATE on
    SYS.WRH$_CURRENT_BLOCK_SERVER, UPDATE on SYS.WRH$_DATAFILE, UPDATE on
    SYS.WRH$_DB_CACHE_ADVICE, UPDATE on SYS.WRH$_DISPATCHER, UPDATE on
    SYS.WRH$_DLM_MISC, UPDATE on SYS.WRH$_DYN_REMASTER_STATS, UPDATE on
    SYS.WRH$_ENQUEUE_STAT, UPDATE on SYS.WRH$_EVENT_HISTOGRAM, UPDATE on
    SYS.WRH$_EVENT_NAME, UPDATE on SYS.WRH$_FILEMETRIC_HISTORY, UPDATE on
    SYS.WRH$_FILESTATXS, UPDATE on SYS.WRH$_IC_CLIENT_STATS, UPDATE on
    SYS.WRH$_IC_DEVICE_STATS, UPDATE on SYS.WRH$_IM_SEG_STAT, UPDATE on
    SYS.WRH$_IM_SEG_STAT_OBJ, UPDATE on SYS.WRH$_INSTANCE_RECOVERY, UPDATE
    on SYS.WRH$_INST_CACHE_TRANSFER, UPDATE on SYS.WRH$_INTERCONNECT_PINGS,
    UPDATE on SYS.WRH$_IOSTAT_DETAIL, UPDATE on SYS.WRH$_IOSTAT_FILETYPE,
    UPDATE on SYS.WRH$_IOSTAT_FILETYPE_NAME, UPDATE on
    SYS.WRH$_IOSTAT_FUNCTION, UPDATE on SYS.WRH$_IOSTAT_FUNCTION_NAME,
    UPDATE on SYS.WRH$_JAVA_POOL_ADVICE, UPDATE on SYS.WRH$_LATCH, UPDATE
    on SYS.WRH$_LATCH_CHILDREN, UPDATE on SYS.WRH$_LATCH_MISSES_SUMMARY,
    UPDATE on SYS.WRH$_LATCH_NAME, UPDATE on SYS.WRH$_LATCH_PARENT, UPDATE
    on SYS.WRH$_LIBRARYCACHE, UPDATE on SYS.WRH$_LMS_STATS, UPDATE on
    SYS.WRH$_LOG, UPDATE on SYS.WRH$_MEMORY_RESIZE_OPS, UPDATE on
    SYS.WRH$_MEMORY_TARGET_ADVICE, UPDATE on SYS.WRH$_MEM_DYNAMIC_COMP,
    UPDATE on SYS.WRH$_METRIC_NAME, UPDATE on SYS.WRH$_MTTR_TARGET_ADVICE,
    UPDATE on SYS.WRH$_MUTEX_SLEEP, UPDATE on SYS.WRH$_MVPARAMETER, UPDATE
    on SYS.WRH$_OPTIMIZER_ENV, UPDATE on SYS.WRH$_OSSTAT, UPDATE on
    SYS.WRH$_OSSTAT_NAME, UPDATE on SYS.WRH$_PARAMETER, UPDATE on
    SYS.WRH$_PARAMETER_NAME, UPDATE on SYS.WRH$_PERSISTENT_QMN_CACHE,
    UPDATE on SYS.WRH$_PERSISTENT_QUEUES, UPDATE on
    SYS.WRH$_PERSISTENT_SUBSCRIBERS, UPDATE on SYS.WRH$_PGASTAT, UPDATE on
    SYS.WRH$_PGA_TARGET_ADVICE, UPDATE on SYS.WRH$_PLAN_OPERATION_NAME,
    UPDATE on SYS.WRH$_PLAN_OPTION_NAME, UPDATE on
    SYS.WRH$_PROCESS_MEMORY_SUMMARY, UPDATE on SYS.WRH$_RECOVERY_PROGRESS,
    UPDATE on SYS.WRH$_REPLICATION_TBL_STATS, UPDATE on
    SYS.WRH$_REPLICATION_TXN_STATS, UPDATE on SYS.WRH$_RESOURCE_LIMIT,
    UPDATE on SYS.WRH$_ROWCACHE_SUMMARY, UPDATE on
    SYS.WRH$_RSRC_CONSUMER_GROUP, UPDATE on SYS.WRH$_RSRC_METRIC, UPDATE on
    SYS.WRH$_RSRC_PDB_METRIC, UPDATE on SYS.WRH$_RSRC_PLAN, UPDATE on
    SYS.WRH$_RULE_SET, UPDATE on SYS.WRH$_SEG_STAT, UPDATE on
    SYS.WRH$_SEG_STAT_OBJ, UPDATE on SYS.WRH$_SERVICE_NAME, UPDATE on
    SYS.WRH$_SERVICE_STAT, UPDATE on SYS.WRH$_SERVICE_WAIT_CLASS, UPDATE on
    SYS.WRH$_SESSMETRIC_HISTORY, UPDATE on SYS.WRH$_SESS_SGA_STATS, UPDATE
    on SYS.WRH$_SESS_TIME_STATS, UPDATE on SYS.WRH$_SGA, UPDATE on
    SYS.WRH$_SGASTAT, UPDATE on SYS.WRH$_SGA_TARGET_ADVICE, UPDATE on
    SYS.WRH$_SHARED_POOL_ADVICE, UPDATE on SYS.WRH$_SHARED_SERVER_SUMMARY,
    UPDATE on SYS.WRH$_SQLCOMMAND_NAME, UPDATE on SYS.WRH$_SQLSTAT, UPDATE
    on SYS.WRH$_SQLTEXT, UPDATE on SYS.WRH$_SQL_BIND_METADATA, UPDATE on
    SYS.WRH$_SQL_PLAN, UPDATE on SYS.WRH$_SQL_SUMMARY, UPDATE on
    SYS.WRH$_SQL_WORKAREA_HISTOGRAM, UPDATE on SYS.WRH$_STAT_NAME, UPDATE
    on SYS.WRH$_STREAMS_APPLY_SUM, UPDATE on SYS.WRH$_STREAMS_CAPTURE,
    UPDATE on SYS.WRH$_STREAMS_POOL_ADVICE, UPDATE on
    SYS.WRH$_SYSMETRIC_HISTORY, UPDATE on SYS.WRH$_SYSMETRIC_SUMMARY,
    UPDATE on SYS.WRH$_SYSSTAT, UPDATE on SYS.WRH$_SYSTEM_EVENT, UPDATE on
    SYS.WRH$_SYS_TIME_MODEL, UPDATE on SYS.WRH$_TABLESPACE, UPDATE on
    SYS.WRH$_TABLESPACE_SPACE_USAGE, UPDATE on SYS.WRH$_TABLESPACE_STAT,
    UPDATE on SYS.WRH$_TEMPFILE, UPDATE on SYS.WRH$_TEMPSTATXS, UPDATE on
    SYS.WRH$_THREAD, UPDATE on SYS.WRH$_TOPLEVELCALL_NAME, UPDATE on
    SYS.WRH$_UNDOSTAT, UPDATE on SYS.WRH$_WAITCLASSMETRIC_HISTORY, UPDATE
    on SYS.WRH$_WAITSTAT, UPDATE on SYS.WRHS$_CELL_IOREASON_NAME, UPDATE on
    SYS.WRHS$_CELL_METRIC_DESC, UPDATE on SYS.WRHS$_DATAFILE, UPDATE on
    SYS.WRHS$_EVENT_NAME, UPDATE on SYS.WRHS$_IM_SEG_STAT_OBJ, UPDATE on
    SYS.WRHS$_IOSTAT_FILETYPE_NAME, UPDATE on
    SYS.WRHS$_IOSTAT_FUNCTION_NAME, UPDATE on SYS.WRHS$_LATCH_NAME, UPDATE
    on SYS.WRHS$_METRIC_NAME, UPDATE on SYS.WRHS$_OPTIMIZER_ENV, UPDATE on
    SYS.WRHS$_OSSTAT_NAME, UPDATE on SYS.WRHS$_PARAMETER_NAME, UPDATE on
    SYS.WRHS$_PLAN_OPERATION_NAME, UPDATE on SYS.WRHS$_PLAN_OPTION_NAME,
    UPDATE on SYS.WRHS$_SEG_STAT_OBJ, UPDATE on SYS.WRHS$_SERVICE_NAME,
    UPDATE on SYS.WRHS$_SQLCOMMAND_NAME, UPDATE on SYS.WRHS$_SQLTEXT,
    UPDATE on SYS.WRHS$_SQL_BIND_METADATA, UPDATE on SYS.WRHS$_SQL_PLAN,
    UPDATE on SYS.WRHS$_STAT_NAME, UPDATE on SYS.WRHS$_TABLESPACE, UPDATE
    on SYS.WRHS$_TEMPFILE, UPDATE on SYS.WRHS$_TOPLEVELCALL_NAME, UPDATE on
    SYS.WRI$_ADV_ACTIONS, UPDATE on SYS.WRI$_ADV_DEF_PARAMETERS, UPDATE on
    SYS.WRI$_ADV_DIRECTIVE_DEFS, UPDATE on
    SYS.WRI$_ADV_DIRECTIVE_INSTANCES, UPDATE on SYS.WRI$_ADV_EXECUTIONS,
    UPDATE on SYS.WRI$_ADV_EXEC_PARAMETERS, UPDATE on
    SYS.WRI$_ADV_FINDINGS, UPDATE on SYS.WRI$_ADV_INST_FDG, UPDATE on
    SYS.WRI$_ADV_JOURNAL, UPDATE on SYS.WRI$_ADV_MESSAGE_GROUPS, UPDATE on
    SYS.WRI$_ADV_OBJECTS, UPDATE on SYS.WRI$_ADV_PARAMETERS, UPDATE on
    SYS.WRI$_ADV_RATIONALE, UPDATE on SYS.WRI$_ADV_RECOMMENDATIONS, UPDATE
    on SYS.WRI$_ADV_REC_ACTIONS, UPDATE on SYS.WRI$_ADV_SQLT_BINDS, UPDATE
    on SYS.WRI$_ADV_SQLT_PLANS, UPDATE on SYS.WRI$_ADV_SQLT_PLAN_HASH,
    UPDATE on SYS.WRI$_ADV_SQLT_PLAN_STATS, UPDATE on
    SYS.WRI$_ADV_SQLT_RTN_PLAN, UPDATE on SYS.WRI$_ADV_SQLT_STATISTICS,
    UPDATE on SYS.WRI$_ADV_TASKS, UPDATE on SYS.WRI$_ADV_USAGE, UPDATE on
    SYS.WRI$_ALERT_HISTORY, UPDATE on SYS.WRI$_OPTSTAT_OPR, UPDATE on
    SYS.WRI$_SEGADV_CNTRLTAB, UPDATE on SYS.WRI$_SEGADV_OBJLIST, UPDATE on
    SYS.WRI$_SQLSET_DEFINITIONS, UPDATE on SYS.WRI$_SQLSET_REFERENCES,
    UPDATE on SYS.WRI$_SQLTEXT_REFCOUNT, UPDATE on SYS.WRM$_ACTIVE_PDBS,
    UPDATE on SYS.WRM$_BASELINE, UPDATE on SYS.WRM$_BASELINE_DETAILS,
    UPDATE on SYS.WRM$_BASELINE_TEMPLATE, UPDATE on SYS.WRM$_COLORED_SQL,
    UPDATE on SYS.WRM$_DATABASE_INSTANCE, UPDATE on SYS.WRM$_PDB_INSTANCE,
    UPDATE on SYS.WRM$_PDB_IN_SNAP, UPDATE on SYS.WRM$_SNAPSHOT, UPDATE on
    SYS.WRM$_SNAPSHOT_DETAILS, UPDATE on SYS.WRM$_SNAP_ERROR, UPDATE on
    SYS.WRM$_WR_CONTROL, UPDATE on SYS.WRM$_WR_SETTINGS, UPDATE on
    SYS.WRM$_WR_USAGE, UPDATE on SYS.WRMS$_SNAPSHOT

Grants of BECOME USER:

SYSTEM <- DBA: BECOME USER
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    BECOME USER
SYSTEM <- DBA <- IMP_FULL_DATABASE: BECOME USER

Grants of DBA role:

SYSTEM: DBA

Grants of AQ_ADMINISTRATOR_ROLE, EM_EXPRESS_ALL, EXP_FULL_DATABASE,
    IMP_FULL_DATABASE, SELECT_CATALOG_ROLE, EXECUTE_CATALOG_ROLE,
    DELETE_CATALOG_ROLE, OEM_MONITOR roles:

SYSTEM: AQ_ADMINISTRATOR_ROLE(*)
SYSTEM <- DBA: EM_EXPRESS_ALL, EXECUTE_CATALOG_ROLE, EXP_FULL_DATABASE,
    IMP_FULL_DATABASE, SELECT_CATALOG_ROLE
SYSTEM <- DBA <- DATAPUMP_EXP_FULL_DATABASE: EXP_FULL_DATABASE
SYSTEM <- DBA <- DATAPUMP_EXP_FULL_DATABASE <- EXP_FULL_DATABASE:
    EXECUTE_CATALOG_ROLE, SELECT_CATALOG_ROLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE: EXP_FULL_DATABASE,
    IMP_FULL_DATABASE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- EXP_FULL_DATABASE:
    EXECUTE_CATALOG_ROLE, SELECT_CATALOG_ROLE
SYSTEM <- DBA <- DATAPUMP_IMP_FULL_DATABASE <- IMP_FULL_DATABASE:
    EXECUTE_CATALOG_ROLE, SELECT_CATALOG_ROLE
SYSTEM <- DBA <- EM_EXPRESS_ALL <- EM_EXPRESS_BASIC:
    SELECT_CATALOG_ROLE
SYSTEM <- DBA <- EXP_FULL_DATABASE: EXECUTE_CATALOG_ROLE,
    SELECT_CATALOG_ROLE
SYSTEM <- DBA <- IMP_FULL_DATABASE: EXECUTE_CATALOG_ROLE,
    SELECT_CATALOG_ROLE

(no users) <- GSMADMIN_ROLE: AQ_ADMINISTRATOR_ROLE

(no users) <- OEM_MONITOR: SELECT_CATALOG_ROLE

(no users) <- SYSUMF_ROLE: SELECT_CATALOG_ROLE

(*) = granted with admin option

Grantee: DBJAVASCRIPT
GRANT, Name: oracle.DbmsJavaScriptUser, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission

Grantee: EJBCLIENT
GRANT, Name: *, Type Schema: SYS, Type Name: java.net.SocketPermission,
    Action: connect,resolve
GRANT, Name: createClassLoader, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: getClassLoader, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission

Grantee: JMXSERVER
GRANT, Name: *, Type Schema: SYS, Type Name: java.net.SocketPermission,
    Action: accept,connect,listen,resolve
GRANT, Name: control, Type Schema: SYS, Type Name:
    java.util.logging.LoggingPermission
GRANT, Name: monitor, Type Schema: SYS, Type Name:
    java.lang.management.ManagementPermission
GRANT, Name: setContextClassLoader, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: createMBeanServer, Type Schema: SYS, Type Name:
    javax.management.MBeanServerPermission
GRANT, Name: control, Type Schema: SYS, Type Name:
    java.lang.management.ManagementPermission
GRANT, Name: javax.net.ssl.*, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: https.proxyHost, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: javax.net.debug, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: java.rmi.server.randomIDs, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: com.sun.jmx.*, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: com.sun.management.*, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: read,write
GRANT, Name: *, Type Schema: SYS, Type Name:
    javax.management.MBeanPermission, Action: *
GRANT, Name: javavm/lib/management/*, Type Schema: SYS, Type Name:
    java.io.FilePermission, Action: read
GRANT, Name: javavm/lib/management/jmxremote.access, Type Schema: SYS, Type
    Name: java.io.FilePermission, Action: read
GRANT, Name: javavm/lib/management/management.properties, Type Schema: SYS,
    Type Name: java.io.FilePermission, Action: read
GRANT, Name: createAccessControlContext, Type Schema: SYS, Type Name:
    java.security.SecurityPermission
GRANT, Name: accessClassInPackage.sun.management.*, Type Schema: SYS, Type
    Name: java.lang.RuntimePermission

Grantee: PUBLIC
GRANT, Name: DUMMY, Type Schema: SYS, Type Name:
    oracle.aurora.security.JServerPermission
GRANT, Name: *, Type Schema: SYS, Type Name: java.util.PropertyPermission,
    Action: read
GRANT, Name: user.language, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: write
GRANT, Name: exitVM, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: createSecurityManager, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: modifyThread, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: modifyThreadGroup, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: getenv.TNS_ADMIN, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: preferences, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
GRANT, Name: LoadClassInPackage.*, Type Schema: SYS, Type Name:
    oracle.aurora.security.JServerPermission
GRANT, Name: oracle.net.tns_admin, Type Schema: SYS, Type Name:
    java.util.PropertyPermission, Action: write
GRANT, Name: getenv.ORACLE_HOME, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
RESTRICT, Name: LoadClassInPackage.oracle.jdbc.*, Type Schema: SYS, Type
    Name: oracle.aurora.security.JServerPermission
RESTRICT, Name: LoadClassInPackage.oracle.aurora.*, Type Schema: SYS, Type
    Name: oracle.aurora.security.JServerPermission
RESTRICT, Name: LoadClassInPackage.java.*, Type Schema: SYS, Type Name:
    oracle.aurora.security.JServerPermission
RESTRICT, Name: loadLibrary.*, Type Schema: SYS, Type Name:
    java.lang.RuntimePermission
RESTRICT, Name: 0:java.lang.RuntimePermission#loadLibrary.*, Type Schema:
    SYS, Type Name: oracle.aurora.rdbms.security.PolicyTablePermission
RESTRICT, Name: LoadClassInPackage.oracle.ord.*, Type Schema: SYS, Type
    Name: oracle.aurora.security.JServerPermission

Grantee: SYSTEM
GRANT, Name: <<ALL FILES>>, Type Schema: SYS, Type Name:
    java.io.FilePermission, Action: read

SYSDBA    (1): SYS
SYSOPER   (1): SYS
SYSBACKUP (1): SYSBACKUP
SYSDG     (1): SYSDG
SYSKM     (1): SYSKM

Users with EXECUTE on SYS.DBMS_PRIVILEGE_CAPTURE: SYSTEM

ENCRYPT_NEW_TABLESPACES=CLOUD_ONLY. Recommended value is ALWAYS.

Encryption wallet location: /u00/app/oracle/admin/NCDB122/wallet
Wallet type: FILE
Status: NOT_AVAILABLE
Keystore type: UNKNOWN
Wallet order: SINGLE

Data file directory: /u00/app/oracle/product/12.2.0.1/dbs

Users with EXEMPT REDACTION POLICY privilege: SYSTEM
Users with EXECUTE on SYS.DBMS_REDACT: SYSTEM

Policy RCA13_SYSTEMS_VPD_POLICY: Protects ORACHKCM.RCA13_LOB2SYS_MAPPING

Users with EXEMPT ACCESS POLICY privilege: (none)
Users with EXECUTE on SYS.DBMS_RLS: ORACHKCM, SYSTEM

Users with EXEMPT ACCESS POLICY privilege: (none)
Users with ADMIN_ANY_SEC_POLICY privilege: SYSTEM
Users with ADMIN_SEC_POLICY privilege: DBSFWUSER, SYSTEM
Users with APPLY_SEC_POLICY privilege: (none)

Policies: (none)

Users with EXECUTE on SYS.DBMS_TSDP_MANAGE: (none)
Users with EXECUTE on SYS.DBMS_TSDP_PROTECT: (none)

Traditional Audit Trail: No records found
FGA Audit Trail: No records found
Unified Audit Trail: In use, 65 records found (Mar 04 2018 - Mar 04 2018)

AUDIT_FILE_DEST=/u00/app/oracle/admin/NCDB122/adump
AUDIT_SYSLOG_LEVEL is not set.
AUDIT_TRAIL=DB

Unified Audit (17): ALTER DATABASE LINK, ALTER PLUGGABLE DATABASE, ALTER
    PROFILE, ALTER ROLE, ALTER USER, CREATE DATABASE LINK, CREATE
    DIRECTORY, CREATE PLUGGABLE DATABASE, CREATE PROFILE, CREATE ROLE, DROP
    DATABASE LINK, DROP DIRECTORY, DROP PLUGGABLE DATABASE, DROP PROFILE,
    DROP ROLE, LOGON, SET ROLE

Unified Audit (30): ADMINISTER KEY MANAGEMENT, ALTER ANY PROCEDURE, ALTER
    ANY SQL TRANSLATION PROFILE, ALTER ANY TABLE, ALTER DATABASE, ALTER
    SYSTEM, AUDIT SYSTEM, BECOME USER, CREATE ANY JOB, CREATE ANY LIBRARY,
    CREATE ANY PROCEDURE, CREATE ANY SQL TRANSLATION PROFILE, CREATE ANY
    TABLE, CREATE EXTERNAL JOB, CREATE PUBLIC SYNONYM, CREATE SQL
    TRANSLATION PROFILE, CREATE USER, DROP ANY PROCEDURE, DROP ANY SQL
    TRANSLATION PROFILE, DROP ANY TABLE, DROP PUBLIC SYNONYM, DROP USER,
    EXEMPT ACCESS POLICY, EXEMPT REDACTION POLICY, GRANT ANY OBJECT
    PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE, LOGMINING, PURGE
    DBA_RECYCLEBIN, TRANSLATE ANY SQL

Traditional Audit: AUDIT_SYS_OPERATIONS is set to TRUE.

Unified Audit policies enabled for administrators: (none)

Traditional audit - auditing enabled: (none)
Unified audit - auditing enabled: ALTER ROLE, CREATE ROLE, DROP ROLE, GRANT
    ANY OBJECT PRIVILEGE, GRANT ANY PRIVILEGE, GRANT ANY ROLE

Traditional audit - auditing enabled: (none)
Unified audit - auditing enabled: ALTER PROFILE, ALTER USER, CREATE
    PROFILE, CREATE USER, DROP PROFILE, DROP USER

Auditing not enabled: ALTER PROCEDURE, ALTER PUBLIC DATABASE LINK, ALTER
    TRIGGER, AUDIT ANY, CREATE ANY DIRECTORY, CREATE LIBRARY, CREATE
    PROCEDURE, CREATE PUBLIC DATABASE LINK, CREATE SPFILE, CREATE TRIGGER,
    DROP ANY DIRECTORY, DROP PROCEDURE, DROP PUBLIC DATABASE LINK, DROP
    TRIGGER, SYSTEM AUDIT

Traditional audit - auditing enabled: (none)
Unified audit - auditing enabled: ADMINISTER KEY MANAGEMENT, ALTER
    DATABASE, ALTER DATABASE LINK, ALTER PLUGGABLE DATABASE, ALTER SYSTEM,
    CREATE ANY LIBRARY, CREATE DATABASE LINK, CREATE EXTERNAL JOB, CREATE
    PLUGGABLE DATABASE, CREATE PUBLIC SYNONYM, DROP ANY PROCEDURE, DROP
    DATABASE LINK, DROP PLUGGABLE DATABASE, DROP PUBLIC SYNONYM, EXECUTE ON
    SYS.DBMS_RLS

Auditing not enabled: CREATE ANY TRIGGER, SELECT ANY DICTIONARY

Traditional audit - auditing enabled: (none)
Unified audit - auditing enabled: ALTER ANY SQL TRANSLATION PROFILE, BECOME
    USER, CREATE ANY JOB, CREATE ANY PROCEDURE, CREATE ANY SQL TRANSLATION
    PROFILE, EXEMPT ACCESS POLICY, EXEMPT REDACTION POLICY, LOGMINING,
    TRANSLATE ANY SQL

Auditing not enabled: LOGOFF

Traditional audit - auditing enabled: (none)
Unified audit - auditing enabled: LOGON

Users with EXECUTE on SYS.DBMS_FGA: ORACHKCM, SYSTEM

Policy ORA_ACCOUNT_MGMT (Disabled): Audits 9 objects/statements
Policy ORA_CIS_RECOMMENDATIONS (Disabled): Audits 26 objects/statements
Policy ORA_DATABASE_PARAMETER (Disabled): Audits 3 objects/statements
Policy ORA_LOGON_FAILURES (Enabled): Audits 1 objects/statements
Policy ORA_RAS_POLICY_MGMT (Disabled): Audits 35 objects/statements
Policy ORA_RAS_SESSION_MGMT (Disabled): Audits 14 objects/statements
Policy ORA_SECURECONFIG (Enabled): Audits 48 objects/statements

O7_DICTIONARY_ACCESSIBILITY=FALSE

SQL92_SECURITY=TRUE

REMOTE_LISTENER=''
SEC_PROTOCOL_ERROR_FURTHER_ACTION=(DROP,3)
SEC_PROTOCOL_ERROR_TRACE_ACTION=TRACE
SEC_RETURN_SERVER_RELEASE_BANNER=FALSE

REMOTE_OS_AUTHENT=FALSE
REMOTE_OS_ROLES=FALSE
OS_ROLES=FALSE

UTL_FILE_DIR=''

Disabled constraints: STS_CHUNKS on GSMADMIN_INTERNAL.SHARD_TS

External procedures: ORDSYS.ORDIMLIBS, SYS.DBMSHADOOPLIB,
    SYS.DBMS_SUMADV_LIB, SYS.DM$RQEXTLIB, SYS.KUBSAGT_LIB

Directory Name: DATA_PUMP_DIR
Path = /u00/app/oracle/admin/NCDB122/dpdump/
Users or roles with access: EXP_FULL_DATABASE(READ),
    EXP_FULL_DATABASE(WRITE), IMP_FULL_DATABASE(READ),
    IMP_FULL_DATABASE(WRITE)

Directory Name: OPATCH_INST_DIR
Path = /u00/app/oracle/product/12.2.0.1/OPatch/

Directory Name: OPATCH_LOG_DIR
Path = /u00/app/oracle/product/12.2.0.1/QOpatch/

Directory Name: OPATCH_SCRIPT_DIR
Path = /u00/app/oracle/product/12.2.0.1/QOpatch/

Directory Name: ORACLE_BASE
Path = /u00/app/oracle/

Directory Name: ORACLE_HOME
Path = /u00/app/oracle/product/12.2.0.1/

Directory Name: ORACLE_OCM_CONFIG_DIR
Path = /u00/app/oracle/product/12.2.0.1/ccr/state/
Users or roles with access: ORACLE_OCM(READ), ORACLE_OCM(WRITE)

Directory Name: ORACLE_OCM_CONFIG_DIR2
Path = /u00/app/oracle/product/12.2.0.1/ccr/state/
Users or roles with access: ORACLE_OCM(READ), ORACLE_OCM(WRITE)

Directory Name: ORA_DBMS_FCP_ADMINDIR
Path = /u00/app/oracle/product/12.2.0.1/rdbms/admin/

Directory Name: ORA_DBMS_FCP_LOGDIR
Path = /u00/app/oracle/product/12.2.0.1/cfgtoollogs/

Directory Name: XMLDIR
Path = /u00/app/oracle/product/12.2.0.1/rdbms/xml/

Directory Name: XSDDIR
Path = /u00/app/oracle/product/12.2.0.1/rdbms/xml/schema/


$ORACLE_HOME: ORACLE_HOME

GLOBAL_NAMES=FALSE

Users with CREATE DATABASE LINK privilege: SYSTEM
Users with CREATE PUBLIC DATABASE LINK privilege: SYSTEM

Private links:
SYS: SYS_HUB.MARKUSDBA.NET

NETWORK_ACL_66983D05BFDB2AE1E0530701A8C0F89D (Host: *, Ports: Min - Max)
Principal: GGSYS, Action: deny, Privilege: resolve
Principal: GSMADMIN_INTERNAL, Action: deny, Privilege: resolve

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Read-only privileges to anonymous
Principal: ANONYMOUS, Action: grant, Privileges: read-properties, read-
    contents, resolve

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Public:All privileges to PUBLIC
Principal: PUBLIC, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Private:All privileges to OWNER only and not accessible to
    others
Principal: dav:owner, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Read-Only:Readable by all and writeable by none
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve
Principal: OLAP_XS_ADMIN, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve
Principal: OLAP_XS_ADMIN, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve
Principal: OLAP_XS_ADMIN, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve
Principal: OLAP_XS_ADMIN, Action: grant, Privileges: all

Namespace: {http://xmlns.oracle.com/xdb/acl.xsd}
Description: Protected:Readable by PUBLIC and all privileges to OWNER
Principal: dav:owner, Action: grant, Privileges: all
Principal: XDBADMIN, Action: grant, Privileges: all
Principal: PUBLIC, Action: grant, Privileges: read-properties, read-
    contents, read-acl, resolve
Principal: OLAP_XS_ADMIN, Action: grant, Privileges: all

SQLNET.ENCRYPTION_SERVER is not set (default value = ACCEPTED).
SQLNET.CRYPTO_CHECKSUM_SERVER is not set (default value = ACCEPTED).

Examined 1 listener.

LISTENER: IPC (1), TCP (1), TCPS (0)

SSL_CERT_REVOCATION is not set (default value = NONE).

TCP.VALIDNODE_CHECKING is not set (default value = NO). Recommended value
    is YES.
TCP.INVITED_NODES is not set.
TCP.EXCLUDED_NODES is not set.

SEC_USER_AUDIT_ACTION_BANNER is not set. Should be set to a proper value.
SEC_USER_UNAUTHORIZED_ACCESS_BANNER is not set. Should be set to a proper
    value.

Listeners not configured properly: LISTENER

Parameter setting for LISTENER:
ADMIN_RESTRICTIONS_LISTENER=ON.
DYNAMIC_REGISTRATION_LISTENER is not set (default value = ON). Recommended
    value is OFF.
VALID_NODE_CHECKING_REGISTRATION_LISTENER is not set (default value = OFF).
    Should not be set to OFF.
SECURE_PROTOCOL_LISTENER is not set.
SECURE_CONTROL_LISTENER is not set.
SECURE_REGISTER_LISTENER is not set.

Listeners configured properly: LISTENER

Parameter setting for LISTENER:
LOGGING_LISTENER=ON.

SYSDBA [dba group]: oracle
SYSOPER [oper group]: oracle
SYSBACKUP [backupdba group]: oracle
SYSKM [kmdba group]: oracle
SYSDG [dgdba group]: oracle
SYSRAC [racdba group]: oracle, grid

PMON process: ora_pmon_NCDB122, Owner: oracle
ORACLE_HOME owner: oracle

Owner: oracle
Command: /u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/perl/bin/perl
    /u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/bin/emwd.pl agent
    /u00/app/oracle/product/agent13cr2/agent_inst/sysman/log/emagent.nohup

Owner: oracle
Command: /usr/bin/ssh-agent /etc/X11/xinit/Xclients

Owner: oracle
Command: /u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/oracle_common/
    jdk/bin/java -Xmx158M -XX:MaxPermSize=96M -server
    -Djava.security.egd=file:///dev/./urandom
    -Dsun.lang.ClassLoader.allowArraySyntax=true -XX:-UseLargePages
    -XX:+UseLinuxPosixThreadCPUClocks -XX:+UseConcMarkSweepGC
    -XX:+CMSClassUnloadingEnabled -XX:+UseCompressedOops
    -Dwatchdog.pid=2844 -cp /u00/app/oracle/product/agent13cr2/agent_13.2.0
    .0.0/jdbc/lib/ojdbc7.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.
    0.0.0/ucp/lib/ucp.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0
    .0/oracle_common/modules/jsch-0.1.53.jar:/u00/app/oracle/product/agent1
    3cr2/agent_13.2.0.0.0/oracle_common/modules/com.oracle.http_client.http
    _client_12.1.3.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/
    oracle_common/modules/oracle.xdk_12.1.3/xmlparserv2.jar:/u00/app/oracle
    /product/agent13cr2/agent_13.2.0.0.0/oracle_common/modules/oracle.dms_1
    2.1.3/dms.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/oracl
    e_common/modules/oracle.odl_12.1.3/ojdl.jar:/u00/app/oracle/product/age
    nt13cr2/agent_13.2.0.0.0/oracle_common/modules/oracle.odl_12.1.3/ojdl2.
    jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/lib/optic.jar:/
    u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/sysman/jlib/log4j-co
    re.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/jlib/gcagent
    _core.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.0.0/sysman/jl
    ib/emagentSDK-intg.jar:/u00/app/oracle/product/agent13cr2/agent_13.2.0.
    0.0/sysman/jlib/emagentSDK.jar oracle.sysman.gcagent.tmmain.TMMain

Owner: oracle
Command: /u00/app/oracle/product/12.2.0.1/bin/tnslsnr LISTENER -inherit

ORACLE_HOME: /u00/app/oracle/product/12.2.0.1
ORACLE_HOME owner: oracle
Directories: 2 (0 permission errors)
Executables in $ORACLE_HOME/bin: 265 (0 permission errors)
Configuration files in $TNS_ADMIN: 2 (0 permission errors)
Data files in $ORACLE_HOME/dbs: 5 (1 permission errors)

Files with permission errors:
dbs/init.ora (rw-r--r-- should be rw-r-----)