Oracle adapter help - expirePassword and oraclePrivs'

Question

I am provisioning users to Oracle 10g.
1) I can see that the user is created but by default the password is expired.
I have mapped expirePassword in the Oracle resource.
And in the ActiveSync Form I am using the following code:
<Field name='accounts[ORCL].expirePassword'>
<Expansion>
<Boolean>false</Boolean>
</Expansion>
</Field>
But still the password is expired.
2) I used the following to get the newly created user to login.
<Field name='accounts[ORCL].oraclePrivs'>
<Expansion>
<s>CREATE SESSION</s>
</Expansion>
</Field>
If I want to GRANT permissions to some tables can I do it here. If so, how to do that.
When I tried to have a list in the expansion block as following it doesn't work.
<Field name='accounts[ORCL].oraclePrivs'>
<Expansion>
<list>
<s>CREATE SESSION</s>
<s>GRANT SELECT, INSERT, UPDATE ON EMPLOYEE to HRRole;</s>
</list>
</Expansion>
</Field>
As of now I am doing it by setting a Role in accounts[ORCL].oracleRoles.
Please help me.
Thanks

Answer 1

1) could be a rule on 10g to expire on account creation
2) I believe to do your GRANTS, you'll need to use the ScriptedJDBC resource.