col OS_USERNAME format a15
col USERNAME format a15
col USERHOST format a15
col TERMINAL format a20
col ACTION format a10
col GRANTEE format a30
col OS_PROCESS format a30
select dba_audit_trail.OS_USERNAME,
dba_audit_trail.USERNAME,
dba_audit_trail.USERHOST,
dba_audit_trail.TERMINAL,
dba_audit_trail.TIMESTAMP,
dba_audit_trail.ACTION,
dba_audit_trail.ACTION_NAME,
dba_audit_trail.GRANTEE,
dba_audit_trail.SESSIONID,
dba_audit_trail.SESSIONID,
dba_audit_trail.OS_PROCESS,
dba_audit_trail.LOGOFF_TIME,
dba_audit_trail.SQL_TEXT
from dba_audit_trail
where dba_audit_trail.USERNAME IN (select grantee from dba_role_privs
where granted_role IN (select role from role_sys_privs where PRIVILEGE like 'CREATE USER'))
and dba_audit_trail.SQL_TEXT like 'create%';
col USERNAME format a15
col USERHOST format a15
col TERMINAL format a20
col ACTION format a10
col GRANTEE format a30
col OS_PROCESS format a30
select dba_audit_trail.OS_USERNAME,
dba_audit_trail.USERNAME,
dba_audit_trail.USERHOST,
dba_audit_trail.TERMINAL,
dba_audit_trail.TIMESTAMP,
dba_audit_trail.ACTION,
dba_audit_trail.ACTION_NAME,
dba_audit_trail.GRANTEE,
dba_audit_trail.SESSIONID,
dba_audit_trail.SESSIONID,
dba_audit_trail.OS_PROCESS,
dba_audit_trail.LOGOFF_TIME,
dba_audit_trail.SQL_TEXT
from dba_audit_trail
where dba_audit_trail.USERNAME IN (select grantee from dba_role_privs
where granted_role IN (select role from role_sys_privs where PRIVILEGE like 'CREATE USER'))
and dba_audit_trail.SQL_TEXT like 'create%';