Your multitenant container database (CDB) contains some pluggable databases (PDBs), you execute the following commands to create a common user and grant connect privileges: Which statement is true…

The CONTAINER clause is optional; its absence does not automatically invalidate the grant or block all connectivity - the actual scope depends on the specific grant syntax used.

Connecting only to root would result from a CONTAINER=CURRENT grant; a CONTAINER=ALL grant extends access to all PDBs as well.

When a common user is created in CDB$ROOT and CREATE SESSION (via the CONNECT role) is granted with CONTAINER=ALL, the privilege propagates to every container - both the root and all existing and future PDBs. This is the core behavior of common privileges in Oracle Multitenant architecture.

The CONNECT role includes CREATE SESSION, which is sufficient for logon; CREATE ANY SESSION is a separate and more powerful system privilege that is not required for basic connectivity.