Can the OracleDB user have CREATE_SYNONYM instead of CREATE_TABLE privileges?