3.3 Create Local End Users

Create two local end users with password authentication. Unlike traditional database users, local end users do not own schemas or database objects. They receive fine-grained data access through data grants assigned to their data roles.

When an end user logs in, ORA_END_USER_CONTEXT.username returns their user name. The data grants in this chapter use predicates that compare this value against the email and manager columns of the hr.employees table. For the predicates to match, the local end-user names you create must match the values stored in those columns.

1. For Marvin, create an end user named manderson.

   CREATE END USER "manderson" IDENTIFIED BY <password>;

2. For Emma, create an end user named ebaker.

   CREATE END USER "ebaker" IDENTIFIED BY <password>;