"cannot grant global roles"
*Cause: The role granted was IDENTIFIED GLOBALLY. Global roles
can only be granted via a central authority for the domain.
*Action: Use ALTER ROLE to change the type of role (from IDENTIFIED
GLOBALLY to other, such as IDENTIFIED BY password),
or allocate it to a global user via the central authority.