You must hold DBADM or SYSADM authority to grant or revoke the SELECT privilege on system catalog views.

必须要有DBADM或SYSADM权限，来授予或撤消系统编目视图上的SELECT权限。

youdao

Most of the rest of the policy merely is there to grant the container sufficient privilege to access bits of the system: network ports, devices, consoles, etc.

剩余的策略主要是授与容器充分的特权，以访问系统的各个部分：网络端口、设备和控制台等。

youdao