| ERROR | cannot grant global roles |
| CAUSE | A role granted was IDENTIFIED GLOBALLY. Global roles can only be granted via a central authority for the domain. |
| ACTION | Use ALTER ROLE to change the type of role (from IDENTIFIED GLOBALLY to other, such as IDENTIFIED BY password), or allocate it to a global user via the central authority. |