What is the privilege for account unlock in Oracle I want to understand the privileges better, but I'm not able to find some useful info using Google.

I thought that I needed ALTER USER privilege to be able to unlock user and change password. But currently I'm on a machine, where I can change the password (also for other users), but I'm not able to unlock locked user. Why is that?

I tried also

SELECT * FROM USER_SYS_PRIVS ;


ant the result is:

TEST_USER   CREATE OPERATOR NO  NO
TEST_USER   ALTER SESSION   NO  NO
TEST_USER   CREATE SESSION  NO  NO
TEST_USER   CREATE DATABASE LINK    NO  NO
TEST_USER   CREATE SYNONYM  NO  NO
TEST_USER   CREATE INDEXTYPE    NO  NO
TEST_USER   CREATE MATERIALIZED VIEW    NO  NO
TEST_USER   CREATE TRIGGER  NO  NO
TEST_USER   GLOBAL QUERY REWRITE    NO  NO
TEST_USER   CREATE SEQUENCE NO  NO
TEST_USER   CREATE CLUSTER  NO  NO
TEST_USER   CREATE TYPE NO  NO
TEST_USER   CREATE PROCEDURE    NO  NO
TEST_USER   CREATE VIEW NO  NO
TEST_USER   CREATE TABLE    NO  NO


Error, when tried unlock:

alter user other_user account unlock
Error report -
SQL Error: ORA-01031: insufficient privileges
01031. 00000 -  "insufficient privileges"
*Cause:    An attempt was made to perform a database operation without
           the necessary privileges.
*Action:   Ask your database administrator or designated security
           administrator to grant you the necessary privileges
you have not shown the roles TEST_USER is granted.  Likely they have been granted the DBA role which allows ALTER USER.

see the documentation for details.  This query will show the roles a user has

SELECT * FROM DBA_ROLE_PRIVS where grantee = 'TEST_USER'


of course this requires privileges too, unless you have the CATALOG role, if you select from this table you can alter a user