In a multitenant environment, the identity and password of a common user are known in the root and in every pluggable database (PDB).
A common user can connect to the root and perform operations. If the common user has the appropriate privileges, then this user can perform operations in PDBs as well, such as granting privileges to local users.
All Oracle-supplied administrative user accounts, such as SYS
and SYSTEM
, are common users and can navigate across the CDB.
The name that you give the common user must start with C##
or c##
and contain only ASCII or EDCDIC characters. (This requirement does not apply to the names of existing Oracle-supplied user accounts, such as SYS
or SYSTEM
.) To find the names of existing user accounts, query the ALL_USERS
, CDB_USERS
, DBA_USERS
, and USER_USERS
data dictionary views.
To create a local user account, you must be connected to the PDB in which you want to create the account, and have the CREATE USER privilege.
The name that you give the local user must not start with a prefix that is reserved for common users, which by default is C## for CDB common users.