| To... | the user must have... |
|---|---|
| create a role or external role | the CREATE ROLE privilege (system level). |
| drop a role or external role | one of the following privileges:
|
| grant privileges to a role, or grant role membership | The role granted WITH ADMIN OPTION. The creator of a role is automatically granted the specified role WITH ADMIN OPTION.
|