The DBC user or a user who already has the CREATE ZONE, DROP ZONE, and WITH GRANT OPTION privileges must explicitly grant these privileges to a zone creator.
|To ...||the user must have the ...|
|create a zone and create a zone root||CREATE ZONE privilege|
|drop a zone||DROP ZONE privilege|
|add or drop a zone root||ALTER ZONE privilege|
|assign a primary DBA to a zone||CREATE USER AS DBA or MODIFY USER AS DBA|
|grant zone access to zone guests||GRANT ZONE|
|revoke the zone access of zone guests||REVOKE ZONE|