The zone root is a database or a user on which a secure zone is created. You create a secure zone and associate a database or a user as the root. Before assigning the database or user as the root of a secure zone, the database or user should not contain any associated objects, users, databases, roles, or profiles.
Root should be an existing user or database. You should create the user or database before you specify the user or database as root.
The user or database that you specify cannot be a guest, creator, or member of another secure zone and cannot contain objects, descendants, roles, profiles, or constraints.
Only the zone creator, owner, and creator of root can have privileges on the root. Other users cannot have privileges on the root. Root cannot have any privileges on other users.
Root cannot be a proxy user.
Root should not be granted with any roles or constraints.
The user should not be logged in while adding the user as a zone root.
Root cannot have a database as default database.
The user or database that you specify cannot have any Access logging or Query logging rules enabled on them or created by them.
- Name of database.
- Name of user.