- Oracle Database 12c Security Cookbook
- Zoran Pavlovi? Maja Veselica
- 357字
- 2021-07-02 16:43:15
Creating a local user
A local user is a user that is created and that exists in only one PDB. A local user can't be created in the root container.
Getting ready
A pluggable database (in our case, pdb1
) should be open. You'll need an existing user (either common or local) who has create user
privilege in that pluggable database.
How to do it...
- Connect to PDB (for example,
pdb1
) as a common user or local user who hascreate user
privilege in that PDB (for example,c##zoran
or system user):SQL> connect c##zoran@pdb1
- Create a local user (for example,
mike
):c##zoran@PDB1> create user mike identified by pa3t5brii container=current;
How it works...

Figure 9
There are a few rules you should be aware of:
- The name of a local user must be unique within its pluggable database and it must not begin with
c##
orC##
- A local user cannot be created in the root
- A local user exists in one and only one PDB and owns a schema in that PDB
There's more...
You can also create local users by using Oracle Enterprise Manager Cloud Control (OEM) 12c.
You can follow the steps given in the How to create a common user using OEM 12c section, except that, in Step 2, you should connect to the pluggable database (for example, pdb1
) instead of the root. Also, you can connect to PDB as a local user who has a local create user
privilege. If you want to switch container, you should click on Container Switcher and a drop-down menu will open (see Figure 10):

Figure 10
In Figure 11, it is shown that the common user you created in the previous recipe is created in the pluggable database (for example, c##john
is created in pdb1
; the common user is created in all pluggable databases that reside in the CDB and will be created in all future PDBs). By clicking on the Create button shown in Figure 11, you can create (only) a local user:

Figure 11