Update Account

Account	SELECT Permission
	Role	Profile
GRANT ALTER USER TO ${UserName};	GRANT ALTER ANY ROLE TO ${UserName};	GRANT ALTER PROFILE TO ${UserName};

For the CDB service account, the above permissions must be in the following format:

GRANT ALTER USER TO <C##username> container=ALL;