The DBC user or a user who already has the CREATE ZONE, DROP ZONE, and WITH GRANT OPTION privileges must explicitly grant these privileges to a zone creator.
| Goal | Privileges User Needs |
|---|---|
| Create zone and zone root | CREATE ZONE privilege |
| Drop zone | DROP ZONE privilege |
| Add or drop zone root | ALTER ZONE privilege |
| Assign primary DBA to zone | CREATE USER AS DBA or MODIFY USER AS DBA |
| Grant zone access to zone guests | GRANT ZONE |
| Revoke zone access of zone guests | REVOKE ZONE |