Cannot drop PDB - insufficient privileges

Question

I created a PDB, and then tried to drop it. I cannot drop it, I get "insufficient privileges" error.  Here is the SQL session :
==============================================
-bash-4.1$ ./sqlplus system/manager1
SQL*Plus: Release 12.1.0.1.0 Production on Thu Sep 18 07:28:53 2014
Copyright (c) 1982, 2013, Oracle.  All rights reserved.
Last Successful login time: Thu Sep 18 2014 07:25:13 -07:00
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
SQL> create pluggable database test002 admin user test2 identified by test2 file_name_convert=('/u01/app/testuser/oradata/orcl/pdbseed', '/u01/app/testuser/oradata/orcl/test002');
Pluggable database created.
SQL> drop pluggable database test002 including datafiles;
drop pluggable database test002 including datafiles
ERROR at line 1:
ORA-01031: insufficient privileges
==============================================
I gave sysdba privileges to user "system", as follows :
SQL> grant sysdba to system;
Grant succeeded.
but still get the same error.
However, if I login as "sysdba", I can drop the PDB. I cannot use "sysdba" user for a number of reasons. I need to login as some other user. Any ideas?

Answer 1

2639137 wrote:
I created a PDB, and then tried to drop it. I cannot drop it, I get "insufficient privileges" error.  Here is the SQL session :
I gave sysdba privileges to user "system", as follows :
SQL> grant sysdba to system;
Grant succeeded.
but still get the same error.
Yes - as the exception says user 'system' does NOT have sufficient privileges to drop a PDB.
That grant of sysdba is ONLY for the current container which is the root.
Oracle 12c is NOT Oracle 11g - the multitenant architecture has SIGNIFICANT differences from previous versions in MANY areas especially in creating/managing users and granting privileges.
The default container for grants is whatever the current container is. If you want the grant to cover ALL containers then you need to specify that.
See the CONTAINER clause for the GRANT statement in the docs
GRANT
CONTAINER Clause
If the current container is a pluggable database (PDB):
  Specify CONTAINER = CURRENT to locally grant a system privilege, object privilege, or role to a user or role. The privilege or role is granted to the user or role only in the current PDB.
If the current container is the root:
  Specify CONTAINER = CURRENTto locally grant a system privilege, object privilege, or role to a common user or common role. The privilege or role is granted to the user or role only in the root.
  Specify CONTAINER = ALL to commonly grant a system privilege, object privilege on a common object, or role, to a common user or common role.
If you omit this clause, then CONTAINER = CURRENT is the default.
See that last statement?