Oracle roles can contain both system and object privileges, making them flexible for privilege management. Roles can be granted to other roles, allowing hierarchical privilege structures. Roles are NOT owned by SYS (they're owned by their creator). Roles cannot be self-referential (granted to themselves), and can use external authentication.