Should new roles be assigned to SYS Should the user SYS be assigned new roles beside the roles that it has when it was created?
Internal Oracle users (SYS, SYSTEM etc) should never be modified in any way, except for password changes.

As far as roles &amp; grants are concerned, SYS already has unrestricted access to the entire RDBMS due to the nature of the user.