ORA-28404
role cannot be altered
Cause
An attempt was made to alter the role to become a global, external, password protected, or secure application role. The role could not be altered because it was already granted to one or more other roles or program units.
Action
Use REVOKE to revoke the role from other roles first.