An object permission defines a capability for a specific object, such as a database or a table. Object permissions are assigned to selected groups, roles, or users. Object permissions are also called grants, permits, or object privileges.

The owner of the object can grant and revoke object permissions and can grant other users the right to grant permissions on the object. The granting of permissions is typically the responsibility of the DBA.

By using permissions, data access can be restricted in several ways. Grants on objects can range from general to specific.

The types of objects that can be restricted with permissions are listed in Object Types with Permissions.