The CTCONTROL privilege links an administrator to a middle-tier application that is set up to conduct trusted sessions. The CTCONTROL privilege is required for any administrator who needs to use the GRANT CONNECT THROUGH statement to complete the setup of trusted sessions on middle-tier applications. You can grant the CTCONTROL privilege only to permanent users, and not to roles or other database objects.