Check for System Privilege Assignments

select grantee||': '||PRIVILEGE from dba_sys_privs
where privilege<>'CREATE SESSION' and
grantee not in ('PUBLIC','AQ_ADMINISTRATOR_ROLE',
'AQ_USER_ROLE','CTXSYS','DBA','DELETE_CATALOG_ROLE',
'EXECUTE_CATALOG_ROLE', 'EXP_FULL_DATABASE',
'GATHER_SYSTEM_STATISTICS','HS_ADMIN_ROLE', 'IMP_FULL_DATABASE',
'LOGSTDBY_ADMINISTRATOR', 'MDSYS','ODM',
'OEM_MONITOR','OLAPSYS','ORDSYS','OUTLN','MTSSYS',
'RECOVERY_CATALOG_OWNER','SELECT_CATALOG_ROLE','SNMPAGENT',
'SYSTEM','WKSYS','WKUSER','WMSYS','WM_ADMIN_ROLE','XDB',
'ANONYMOUS','CONNECT','DBSNMP','JAVADEBUGPRIV','ODM_MTR',
'OLAP_DBA','ORDPLUGINS','RESOURCE','RMAN','SYS','WKPROXY',
'AURORA$JIS$UTILITY$','AURORA$ORB$UNAUTHENTICATED',
'OSE$HTTP$ADMIN','TIMESERIES_DBA','TIMESERIES_DEVELOPER',
'OLAP_USER')
and grantee not in (select grantee from dba_role_privs where granted_role='DBA')
and grantee not in (select username from dba_users where account_status = 'LOCKED');