The DBC user or a user who already has the CREATE ZONE, DROP ZONE, and WITH GRANT OPTION privileges must explicitly grant these privileges to a zone creator.
| To ... | the user must have the ... |
|---|---|
| create a zone and create a zone root | CREATE ZONE privilege |
| drop a zone | DROP ZONE privilege |
| add or drop a zone root | ALTER ZONE privilege |
| assign a primary DBA to a zone | CREATE USER AS DBA or MODIFY USER AS DBA |
| grant zone access to zone guests | GRANT ZONE |
| revoke the zone access of zone guests | REVOKE ZONE |