GRANT
  { { grant_system_privileges | grant_object_privileges }
    [ CONTAINER = { CURRENT | ALL } ] }
  | grant_roles_to_programs ;