CREATING USERS - PRIVILEGES

I've created a procedure to create sso & portal users that calls portal30.wwsec_api.add_portal_user and portal30_sso.wwsso_api_user_admin.create_user.
When logged on as portal30 this works fine. I've create another user with full admin priviliges to run this procedure. However, it fails, I guess because of these priviliges.
Is it possible to create a user other than portal30 to execute this procedure?
I don't want the person given the role of creating users to log in as portal30!!

Sorted this one now. Please ignore!

Similar Messages

How to create user privileges in java

Hello, I need help! I'm now creating a system based in Java which I need to create a user privilege for security purposes. I need to create 3 kinds of users, 1st is the administrator and the 2nd is a viewer access which can only view the software but can't edit anything and the last 1 is the encoder view. Please help!!! If there is a website which teach me about this, please post the website. Thanks!

What do you mean by swing application? Well, it is just an application, not web based. After I finished the application, I'm thinking of networking the application but unfortunately, I think MS access don't support networking but it is an added feature. I'm using MS Access for my database because that is the only databse they have. I want to create an user privileges for security purposes but I don't know how to do it. Thanks for your reply!

Creating a user with "create user" privilege using PL/SQL?

I have managed to use the PL/SQL DBMS_LDAP package to create and modify OID users (DBMS_LDAP.add_s and DBMS_LDAP.modify_s).
The question is: How can I use DBMS_LDAP to assign privileges to OID users? By "privileges" I mean options like the following (i.e. the options you can enable/disable for any OID user if you login to OIDDAS and click the "privileges" button for a particular user):
Allow user creation
Allow user editing
Allow user deletion
Allow group creation
Allow group editing
Allow group deletion
Allow privilege assignment to users
Allow privilege assignment to groups
Andy

Solution found.
In case anyone comes back to this thread in the future looking to achieve a similar thing: Metalink 205315.1 contains details.

How to create user in Oracle 11g Console Administration through browser

Hi
I installed Oracle 11g on my Windows XP system
then i opened the console through IE 8.0 using the address "https://serversys:1158/em"
then i logged into this console by the username SYS/SYS@orcl as SYSDBA
then i opened the SCHEMA tab
but here i didn't found any link like "USERS" to create/manage users
How can i create the users..?
thanks in advance
jk

user10922309 wrote:
Yes, Hans i am planning to become a DBA from India.Good. If you ever move to North America to become a DBA, let us know. >:)
With the help of your link "admqs_administer_users.htm"
i found that bold "Users" link in "Server" tab bold
but right now i am getting the error "ora-01301: insufficient privilages"
then i granted the 'create user' privilege to SYS
error is coming..If you have properly logged on as SYS, as shown by the 'Logged in as SYS' note in the upper right corner, you should not be getting the 1301. Try logging out and following the steps in the document I gave you starting at chapter 1.

Create user not working!

Hello Everybody:
I am a beginner here. I was trying to create a user named turner, password as tur. I had following code.
SQL> connect scott/tiger;
Connected.
SQL> CREATE USER turner IDENTIFIED BY tur;
CREATE USER turner IDENTIFIED BY tur
*ERROR at line 1:ORA-01031: insufficient privileges
SQL>
System did not like it. It says scott has insufficient privileges. How can I look what privilege does scott have?
How can I add create user privileges to scott. Any response in this regards highly apprciated.
Thanks. -Bal

SQL>connect system/manager
SQL>grant dba to scott
So, scott can work as dba.
Sys and system are the default database administrator users.
Both users are created automatically when database is created.
and They are granted the DBA role.
Sys is owner of the database data dictionary.
and his(her) password is change_on_install.
System is owner of additional internal tables and views used by Oracle tool.
Both sys and system are regual users, which are stored in the data dictionary.

Execute CreateUser() Procedure without "create user" rights

Is it possible to create and execute a procedure that would use Dynamic SQL (or some other method) to create a user even though the user executing the procedure does not have "create user" privileges?
Thank You for any assistance

Yes, with a default definer's rights procedure, only the owner of the procedure would need the CREATE USER privilege. The invoker of the procedure would only need EXECUTE on the procedure.

How to grant create table privilege for a user on a specific table

Hi:
I created a user, for a test scenario. I granted this user create any table, and I made the default tablespace as example.
When I connect as the user and try to create a table, I get this:
SQL> create table T1 (NAME varchar2 (500), AGE number(2));
create table T1 (NAME varchar2 (500), AGE number(2))
ERROR at line 1:
ORA-01950: no privileges on tablespace 'EXAMPLE'
How can I grant the necessary privilege to have user create/delete tables on tablespace example?
Thanks.
DA

create user ADAM identified by radge default tablespace EXAMPLE
quota 10M on EXAMPLE;
for example 10Mbytes given to Example tablespace.... or you can write:
.....quota unlimited on EXAMPLE
and
grant connect to ADAM
grant create table to ADAM .....
or
grant connect , resource to ADAM .... although grant resource is not recommended...
....and something else....
you should define temporary tablespace in create user command... otherwise the system would be used...
Greetings...
Sim
Message was edited by:
sgalaxy

Insufficient privileges when creating user logged in as SYS

Hi,
I'm working on 11.1.0.6.0 Enterprise Edition, Advanced Security options, Label Security a and Database Vault installed. (for testing purposes)
I'm creating a new user being logged as SYS using this sentence:
CREATE USER "HR_DIRECTOR" PROFILE "DEFAULT" IDENTIFIED BY "*******" DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" ACCOUNT UNLOCK;
However, the command fails with the message "Failed to commit: ORA-01031: insufficient privileges . You do not have enough privileges to perform this operation. You must have the appropriate system and object privileges to create, edit, or drop database objects or objects outside of your schema."
Please note that I'm working on a fresh DB install and I have also installed Database Vault in this instance for testing purposes, but still haven't configured any realm or command rules on it.
Is it possible Vault is the reason why I am not able to create a new user?
Thanks and Regards,
Leandro

Hi, It seems I've found it.
After you install Database Vault and associate it with your SID, SYS user is revoked the CREATE USER system privilege.
Only a user with the DV_ACCTMGR role may create, alter or drop a user. This is done in order to separate responsabilities in your database. A SYS user cannot grant himself this role or the DV_OWNER role.
(If interested, check page 10-4 from http://www.oracle.com/pls/db111/to_toc?pathname=server.111/b31222/toc.htm)
Regards,
Leandro

How to create an user privileges in java

Hello, I need help! I'm now creating a system based in Java which I need to create a user privilege for security purposes. I need to create 3 kinds of users, 1st is the administrator and the 2nd is a viewer access which can only view the software but can't edit anything and the last 1 is the encoder view. Please help!!! If there is a website which teach me about this, please post the website. Thanks!

java programs can not run without a jvm. there may be some compiliers that can compile down to native code but i haven't heard of any good ones. your best bet is to download installanywhere, there is a freeware version, and it will wrap up your program along with a jvm and generate an .exe file. Keep in mind that the exe that it generates just starts up the jvm and your program but it will appear to be like any exe.

Create user with dba privileges

How do I create a user with DBA privileges in Oracle? The user should be able to create, insert, delete, truncate and other functions without any limits. Do I have to issue GRANT statements?

Hi,
I don't believe there's any way to create a user and grant privileges in one command.
First, create the user:
CREATE USER foo IDENTIFIED BY bar;Then grant the privileges. There's a pre-defined role called DBA that has all the privileges you mentioned.
GRANT dba TO foo;It's easy to write a script to do these two commands together, so you could say
@CREATE_USER foo bar dba

AUDIT action (create, delete, privilege escalation, set and change password from users account and group) users and admins in Solaris 10

Hello.
in Solaris 10 i need auditing process create, delete, privilege escalation, set and change password and etc... from users account and group.
I set settings:
in file syslog.conf:
*.info;mail.none;cron.none;audit.notice            @IP-Remote-syslog-server-SIEM
in file   /etc/security/audit_control:
dir:/var/audit
flags:lo,ad,ex,cc,am,no,fc,fd
minfree:20
naflags:lo
plugin:name=audit_syslog.so;p_flags=lo,ad,ex,cc,am,no
in file   /etc/security/audit_user:
root:lo,ad:no
Now I see in the logs only the fact of a connection via SSH and run processes on behalf of users. Creation. delete users, change passwords for some reason do not is logged.
Many users. For each individual write permissions in the file /etc/security/audit_user not possible, it is likely to forget any new user (or there is a possibility in this file one line to describe the audits for all accounts?)
Where is the mistake?

You are most likely hitting Bug 15779000 user/role/groupadd/mod/del don't audit their use.
And the fix is only available in S11.2.
-- Renaud

Create user with select privilege only one schema

can someone tell me how i can create user with select priviliges only one schema.
i don't want the user to have any select privileges with other schema.
can someone advise me.
Thansk

In general, you would do something like
CREATE ROLE abc_read_only;
FOR x IN (SELECT * FROM dba_tables WHERE owner='ABC')
LOOP
EXECUTE IMMEDIATE 'GRANT SELECT ON abc.' || x.table_name || ' TO abc_read_only';
END LOOP;
CREATE USER your_user ...;
GRANT abc_read_only TO your_userYou create a role, grant the role SELECT access to all the tables in the ABC schema (you can extend this to grant access to views, functions, etc depending on the requirements), and then grant that role to your user.
Justin

Create user and session privilege

Hi everyone. I connected to database as SYSTEM and created new user (Tom):
CREATE USER Tom IDENTIFIED BY Tom
Then using SQL Developer tried to connect to the database as Tom and got error, that Tom lacks CREATE SESSION privilege. How to give him it?

You need to give a certain quota to that user, or that role. For example,
ALTER USER <username> QUOTA UNLIMITED ON <tablespace_name>;
You can also specifiy a set amount in place of the unlimited keyword.
ALTER USER <username> QUOTA 500M ON <tablespace_name>;
If you create a role, then assign the privileges to that role you can group your privileges together. When you create a new user just assign the role to the user. You can then just add privileges or remove them from the role and this will take affect for all the users that have that role.

SYSDBA does not have privilege to create user

I have a fresh Oracle Database 11.1.0.7.0 installation.
I am able to connect to the database using either of the following commands from Linux :
sqlplus "/ as sysdba"
sqlplus "sys/pwd as sysdba"
But after I connect, I am not able to create user. Following command gives me error:
SQL> create user adi identified by adi;
create user adi identified by adi
ERROR at line 1:
ORA-01031: insufficient privileges
SQL>
My assumption was that sysdba role has unlimited privileges, then why does the database throw this error.

Hmmm....
Is the database you are using the one that you can create during the software installation?
If so, the first thing I would recommend is to use DBCA and drop that database.
It is a play database, and not configured for much of any real purpose.
Aside from that, it could be anything, but it obviously shouldn't happen.
When you (normally) create a user, you would specify a user, password, default tablespace, adn temporary tablespace, then quota on the default tablespace. Next, you would grant roles and privileges accordingly to meet your needs.
The problem with the play database is that you may not even have any tablespaces besides "SYSTEM" to create the users, and you wouldn't want to put them into the SYSTEM tablespace anyway.
Back to my recommendation: use 'dbca' and drop and recreate the database using an appropriate template (or customize it yourself for your needs).
Hope this helps.

Create User Groups and assign Access privileges in Reports

Hi All,
Could you share the document or explain which explains about the Standard method to create User Groups in CMC for BOBJ XI 3.1 architecture.
And how to assign privileges to user groups like view reports, folders, privileges to create/edit reports etc.
Environment:
- Backend - BW
- and BO XI 3.1 sp3
Thanks,
AK

BO XI 3.1 Administration guide
http://help.sap.com/businessobject/product_guides/boexir31SP3/en/xi31_sp3_bip_admin_en.pdf

CREATING USERS - PRIVILEGES

Similar Messages

Maybe you are looking for