One very common production request sounds simple:
"Can we give this user access, but make sure they cannot change anything?"
Before Oracle AI Database 26ai, DBAs usually handled this by creating a
separate reporting user, granting only
SELECT, removing DML
privileges, or depending on carefully designed roles. That approach works
when access is cleanly designed from the beginning. But in real production
systems, users often collect privileges over time. Support users get
emergency grants, application users may have broader access than expected,
and batch accounts sometimes have privileges that nobody wants to touch
during an incident.