It is really amazing how some people are compeled to post half a%$%#s answers...
1- session_privs query does not answers the poster's question
2- who told you poster knows the affected user password?
3- wouldn't be much simpler to do something like...
Code:
select *
from dba_role_privs
where grantee = 'AFFECTED_USERNAME'
and granted_role = 'DBA'
;
Disclaimer: Advice is provided to the best of my knowledge but no implicit or explicit warranties are provided. Since the advisor explicitly encourages testing any and all suggestions on a test non-production environment advisor should not held liable or responsible for any actions taken based on the given advice.