Create Account

Account	SELECT Permission
	Role	Profile
GRANT CONNECT TO ${UserName};	GRANT CREATE ROLE TO ${UserName};	GRANT CREATE PROFILE TO ${UserName};
GRANT CREATE USER TO ${UserName};
GRANT GRANT ANY ROLE TO ${UserName};
GRANT GRANT ANY PRIVILEGE TO ${UserName};
GRANT SELECT ON DBA_TABLESPACES TO ${UserName};
GRANT SELECT ON DBA_PROFILES TO ${UserName};

For the CDB service account, the above permissions must be in the following format:

Connect account

GRANT CONNECT TO <C##username> container=CURRENT;

All other permissions

GRANT CREATE ROLE TO <C##username> container=ALL;