Which three statements are true about user account administration? (Choose three.)

Changes made to a user's profile, such as resource limits or password policies, take effect only upon the user's next successful login, meaning existing active sessions continue under the profile settings that were active when they connected.

While the `ALTER USER` system privilege is specifically required to change tablespace quotas for other users, the `SYSDBA` privilege encompasses all system privileges, making users with this high-level role fully authorized and typically responsible for such administrative tasks.

The `CREATE USER` system privilege is necessary to create new user accounts in Oracle. By default, only the foundational `SYS` and `SYSTEM` administrative users are granted this privilege in a fresh database installation, making them the primary account creators.

User tablespace quotas are specifically designed to limit space usage within *permanent* tablespaces, not temporary tablespaces, as temporary space is managed differently at the session level.

While `CREATE SESSION` privilege is necessary for a user to log in, changing one's own password involves executing the `ALTER USER` command, which is an action authorized for any connected user on their own account, not solely dependent on `CREATE SESSION` as the exclusive authorization.