The table owner or the System Security Officer grants decrypt permission on a table or a list of columns in a table.
grant decrypt on [ owner. ]tablename[(columnname [{,columname}])]
to user | group | role
grant all on a table or column does
not grant decrypt permission.
