OS_ROLES

OS_ROLES determines whether Oracle or the operating system identifies and manages the roles of each username.

Note: Enterprise User Security (EUS) is deprecated with Oracle AI Database 26ai.

Oracle recommends that you migrate to using Centrally Managed Users (CMU). This feature enables you to directly connect with Microsoft Active Directory without an intervening directory service for enterprise user authentication and authorization to the database. If your Oracle Database is in the cloud, you can also choose to move to one of the newer integrations with a cloud identity provider.

Property	Description
Parameter type	Boolean
Default value	false
Modifiable	No
Modifiable in a PDB	No
Range of values	true | false
Basic	No

Values

• TRUE

  The operating system completely manages the role grants for all database usernames. When a user attempts to create a session, the username’s security domain is initialized using the roles identified by the operating system.

  Revocation by Oracle of roles granted by the operating system is ignored, as are any roles previously granted by Oracle.

• FALSE

  Oracle identifies and manages the roles.

See Also: Oracle AI Database Administrator’s Guide and Oracle AI Database Enterprise User Security Administrator’s Guide for more information on roles and on setting this parameter