grant { |filter FILTER-NAME |execute { CALC-NAME |{any|default} [ !on system! |on application APP-NAME |on database DBS-NAME ] } to{USER-NAME|GROUP-NAME}