select grantee||': '||PRIVILEGE from dba_sys_privs
                where privilege<>'CREATE SESSION' and
               grantee not in ('PUBLIC','AQ_ADMINISTRATOR_ROLE',
               'AQ_USER_ROLE','CTXSYS','DBA','DELETE_CATALOG_ROLE',
  'EXECUTE_CATALOG_ROLE', 'EXP_FULL_DATABASE',
  'GATHER_SYSTEM_STATISTICS','HS_ADMIN_ROLE', 'IMP_FULL_DATABASE',
  'LOGSTDBY_ADMINISTRATOR', 'MDSYS','ODM',
  'OEM_MONITOR','OLAPSYS','ORDSYS','OUTLN','MTSSYS',
               'RECOVERY_CATALOG_OWNER','SELECT_CATALOG_ROLE','SNMPAGENT',
               'SYSTEM','WKSYS','WKUSER','WMSYS','WM_ADMIN_ROLE','XDB',
               'ANONYMOUS','CONNECT','DBSNMP','JAVADEBUGPRIV','ODM_MTR',
               'OLAP_DBA','ORDPLUGINS','RESOURCE','RMAN','SYS','WKPROXY',
               'AURORA$JIS$UTILITY$','AURORA$ORB$UNAUTHENTICATED',
               'OSE$HTTP$ADMIN','TIMESERIES_DBA','TIMESERIES_DEVELOPER',
               'OLAP_USER')
    and grantee not in (select grantee from dba_role_privs where granted_role='DBA')
    and grantee not in (select username from dba_users where account_status = 'LOCKED');