✔ 最佳答案
The internal user IDs and passwords in the database are used to help assign the "user privileges" (= rights) of the Oracle database. In other words, it is the user ID (= user name) and password as provided by the database itself that connect you to the database, but not those of the operating system. Without the database password, you cannot get access to the Oracle database even if you have logged into the operation system.
Users with different user privileges can perform different database operations, for instance, only DBA (database administrator) can perform the start-up and shutdown of the database.
The information of the database users and passwords is by default stored in the data dictionary. However, in a large scale database system, this information is generally encrypted and saved as a separate password file (= password credentials), which is kept in places other than the database and protected by the operating system.
Another benefit of storing the passwords separately in a password file is enable the remote users to connect with the Oracle database for performing all the operations including the start-up operation, only through SQL * Plus without the need of connecting to telnet.
參考: My own experience as an IT professional