select grantee||': '||granted_role from dba_role_privs
where grantee not in('DBA','SYS','SYSTEM','WKSYS','LBACSYS','WMSYS')
and admin_option='YES'
and grantee not in (select distinct owner from dba_objects)
and grantee not in (select grantee from dba_role_privs where granted_role='DBA');