select grantee,granted_role from dba_role_privs
       where default_role='YES'
       and grantee not in ('DBA','SYS','SYSTEM')
       and granted_role not in ('CTXSYS','DBA','IMP_FULL_DATABASE','MDSYS','SYS','WKSYS')
       and granted_role in
         (select grantee from dba_sys_privs where privilege like '%USER')
       and grantee not in (select distinct username from dba_users where account_status = 'LOCKED');