Script of user grants

Question

I want to get user creation script from my database.
So i used the following query.
SELECT 'create user ' || U.username || ' identified ' ||
DECODE(PASSWORD,
NULL, 'EXTERNALLY',
' by values ' || '''' || PASSWORD || ''''
) || CHR(10) || 'default tablespace ' || default_tablespace || CHR(10) ||
'temporary tablespace ' || temporary_Tablespace || CHR(10) ||
' profile ' || PROFILE || CHR(10) ||
'quota ' ||
DECODE ( Q.max_bytes, -1, 'UNLIMITED', NULL, 'UNLIMITED', Q.max_bytes) ||
' on ' || default_tablespace ||
DECODE (account_status,'LOCKED', ' account lock',
               'EXPIRED', ' password expire',
               'EXPIRED \& LOCKED', ' account lock password expire',
               NULL)
||
FROM DBA_USERS U, DBA_TS_QUOTAS Q
-- Comment this clause out to include system & default users
WHERE U.username NOT IN ('SYS','SYSTEM',
'SCOTT','DBSNMP','OUTLN','WKPROXY','WMSYS','ORDSYS','ORDPLUGINS','MDSYS',
'CTXSYS','XDB','ANONYMOUS','OWNER','WKSYS','ODM_MTR','ODM','OLAPSYS',
'HR','OE','PM','SH','QS_ADM','QS','QS_WS','QS_ES','QS_OS','QS_CBADM',
'QS_CB','QS_CS','PERFSTAT')
AND U.username=Q.username(+) AND U.default_tablespace=Q.tablespace_name(+)
So get the user creation script.
Now i want to get all the grants,previledges,object grants,resource group etc of those all users.
Is there any script available?
How can i get that
Thanks,
Edited by: user618704 on Feb 25, 2009 2:34 AM

Answer 1

Hi,
Łukasz has demonstrated how the password are stored in encrypted format in the database. So if you generate create user script from the source database (which will NOT reveal the password to you in the script), and run the script on target database, the users will get created with the same password as that of the source database.
Login as SYS in source database & spool the output of the following user creation script:
select 'create user '||username||' identified by values '''||password||''''
||' default tablespace '||default_tablespace||' temporary tablespace '||temporary_tablespace||' ;'
from dba_users
where username not in ('SYS','SYSTEM','DBSNMP','MDSYS','CTXSYS','ORDSYS')
/Then, spool the output of the following role creation script:
select ' create role ' || role|| ' ;' from dba_roles
/And then, spool the output of the following grant script:
select 'GRANT '||granted_role||' TO '||grantee||' ;' from dba_role_privs
--where grantee not in
--('AURORA$JIS$UTILITY$','DBA','DBSNMP','EXECUTE_CATALOG_ROLE','EXP_FULL_DATABASE',
--'IMP_FULL_DATABASE','OEM_MONITOR','ORDPLUGINS','OSE$HTTP$ADMIN',
--'SELECT_CATALOG_ROLE','SYS','SYSTEM','WMSYS','CTXSYS','MDSYS','ORDSYS','OUTLN')
/Hope it helps.
Regards,
Z.K.