ORA-28022
External roles cannot be granted to a global user or global role.
Cause
The role used in the GRANT statement was an external role. Roles that are created with IDENTIFIED EXTERNAL cannot be granted to global users or global roles or any other roles.
Action
Review your authorization design to select your action. Some options to consider:
- Use another non-external role instead.
- Use ALTER ROLE to change the role type so that it is not external.
- Change the global role or global user (ALTER ROLE or ALTER USER) so that it is not a global role or user anymore.
ORA-28022
cannot grant external roles to global user or role
Cause
The role granted was IDENTIFIED EXTERNALLY. External roles cannot be granted to global users, to global roles or to any other roles.
Action
Use ALTER ROLE to change the type of the role being granted (from IDENTIFIED EXTERNALLY to other, such as NOT IDENTIFIED) or use ALTER USER to change the type of the user that is the grantee.
ORA-28022
cannot grant external roles to global user or role
Cause
The role granted was IDENTIFIED EXTERNALLY. External roles cannot be granted to global users, to global roles or to any other roles.
Action
Use ALTER ROLE to change the type of the role being granted (from IDENTIFIED EXTERNALLY to other, such as NOT IDENTIFIED) or use ALTER USER to change the type of the user that is the grantee.
