When you grant a privilege on an object to a user or group, you can also give the user or group the right to grant the same to other users and groups. This right is called the Grant option. (Exception: the CONTROL privilege doesn't have this option; however, a user with SYSADM or DBADM authority can grant the CONTROL privilege to others.) With the Grant option, a user can grant a privilege on an object to other users and to groups. When a group holds a privilege, with the Grant option, on an object, each member of the group can grant that same privilege on the same object to other groups and users.
For example, suppose you want GROUP1's members to change values of specified columns in rows of TABLE1 and to allow other users to do the same. To achieve this, you could grant GROUP1 the UPDATE privilege, with the Grant option, on TABLE1. Each member of GROUP1 could then grant the UPDATE privilege on TABLE1 to other groups and to individual users.
[ Top of Page | Table of Contents | Glossary | Index ]