Right. I would suggest you go for option c)
So you can:
a) revoke those roles (some or all of them) from SYS
b) when creating new roles, if the creator doesn't require that role, revoke it from him/her immediately after the creation
c) increase MAX_ENABLED_ROLES




Reply With Quote