SYS
can connect AS SYSDBA
, SYSTEM
cannot.
SYSDBA
privilege is required to perform certain administrative tasks, like CREATE DATABASE
and DROP DATABASE
, and query any tables despite GRANT
'ed permissions on them.
In fact, whenever you connect as SYSDBA
, you become a SYS
.