select grantee||': '||granted_role from dba_role_privs
        where grantee not in
         ('SYS','SYSTEM','MDSYS','CTXSYS',
         'ORDSYS','ORDPLUGINS','AURORA$JIS$UTILITY$',
         'HR','ODM','ODM_MTR','OE','OLAPDBA','OLAPSYS',
         'OSE$HTTP$ADMIN','OUTLN','TRACESVR','REPADMIN',
         'PM','PUBLIC','QS','QS_ADM','QS_CB','QS_CBADM', 'DBSNMP',
         'QS_CS','QS_ES','QS_OS','QS_WS','RMAN','SH','WKSYS',
         'WMSYS','XDB','WKPROXY','LBACSYS','OLAPSVR', 'PERFSTAT')
          and grantee not in (select role from dba_roles)
          and grantee not in
            (select grantee from dba_role_privs where granted_role='DBA')
          and grantee not in (select distinct owner from dba_objects)
          and granted_role in
      ('AQ_ADMINISTRATOR_ROLE',
       'AQ_USER_ROLE','AUTHENTICATEDUSER','CONNECT',          
           'CTXAPP','DELETE_CATALOG_ROLE',
           'EJBCLIENT','EXECUTE_CATALOG_ROLE',
           'EXP_FULL_DATABASE','GATHER_SYSTEM_STATISTICS',
           'GLOBAL_AQ_USER_ROLE','HS_ADMIN_ROLE',
           'IMP_FULL_DATABASE','JAVADEBUGPRIV', 'JAVAIDPRIV','JAVASYSPRIV',
           'JAVAUSERPRIV','JAVA_ADMIN','JAVA_DEPLOY',
           'LOGSTDBY_ADMINISTRATOR','OEM_MONITOR','OLAP_DBA',
           'RECOVERY_CATALOG_OWNER','RESOURCE','SALES_HISTORY_ROLE',
           'SELECT_CATALOG_ROLE','WKUSER','WM_ADMIN_ROLE','XDBADMIN')
           order by grantee;