Any zone user, including the primary DBA, can grant access privileges to other zone users or to zone guests. For example:
GRANT privileges ON object_name TO user_name_list ;
Zone users cannot use the WITH GRANT OPTION privilege to grant access privileges on zone objects to a zone guest.