create user username identified by password; grant dba to username; 授权 或 grant connect, resource to username; 已授予的权限可以撤消 revoke connect, resource from username