DB13: ORA-01031: insufficient privileges

Hello All,
I entered the t-code DB13 and I have the following error: ORA-01031: insufficient privileges, which I re-searched on the OSS for support and I found this note: Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role, which I have verfied all the permssions and roles. Still no luck on accessingt he DB13 t-codes. I tried to execute this SQL Script that is being executed by Db13 in OS using SQL Plus. i still get the same error. I am not sure what permission I am missing here. Could you please tell me what I am exactly missing here.
SELECT beg, funct, sysid, obj, rc, ende, actid,
line FROM sap_sdbah WHERE beg BETWEEN
'20090105000000' AND '20090210235959' AND sysid =
'BIQ'
SQL> select grantee, granted_role, default_role
2        from dba_role_privs
3         where grantee = 'SAPSR3';
GRANTEE                        GRANTED_ROLE                   DEF
SAPSR3                         SAPCONN                        YES
I did run this script: sapconn_role.sql to set the permission correctly. No luck.
Note: I logged to the system as <SID>adm user.
Thanks in Advance
Thanks
Kumar

Hi Stefan,
I just compared my BIQ System which is giving problem with accessing DB13 with BIP (production system) which works fine.
My BIQ has total rows: 2353 when I execute this SQL Script that you posted. Where as BIP gave me: 2383 rows selected.
Also BIP has the following output:
O$SURESH-LOCAL\SAPSERVICEBIP SAPUSER                        O$SURESH-LOCAL\BIPADM         SAPUSER
PUBLIC                         SAP$KSMSP                      SYS                            SAP_$KSMSP
PUBLIC                         SAP$KCBFWAIT                   SYS                            SAP_$KCBFWAIT
PUBLIC                         SAP$BH                         SYS                            SAP_$BH
PUBLIC                         SAP_SDBAH                      SAPSR3                         SDBAH
PUBLIC                         SAP_SDBAD                      SAPSR3                         SDBAD
PUBLIC                         SAP_MLICHECK                   SAPSR3                         MLICHECK
PUBLIC                         SAP_SAPLIKEY                   SAPSR3                         SAPLIKEY
PUBLIC                         SAP_DBAML                      SAPSR3                         DBAML
PUBLIC                         SAP_DBARCL                     SAPSR3                         DBARCL
PUBLIC                         SAP_DBAFID                     SAPSR3                         DBAFID
PUBLIC                         SAP_DBAEXTL                    SAPSR3                         DBAEXTL
PUBLIC                         SAP_DBAREOL                    SAPSR3                         DBAREOL
PUBLIC                         SAP_DBABARL                    SAPSR3                         DBABARL
PUBLIC                         SAP_DBADFL                     SAPSR3                         DBADFL
PUBLIC                         SAP_DBAOPTL                    SAPSR3                         DBAOPTL
PUBLIC                         SAP_DBASPAL                    SAPSR3                         DBASPAL
PUBLIC                         SAP_DBABD                      SAPSR3                         DBABD
PUBLIC                         SAP_DBABL                      SAPSR3                         DBABL
PUBLIC                         SAP_DBATL                      SAPSR3                         DBATL
PUBLIC                         SAP_DBAOBJL                    SAPSR3                         DBAOBJL
PUBLIC                         SAP_DBAPHAL                    SAPSR3                         DBAPHAL
PUBLIC                         SAP_DBAGRP                     SAPSR3                         DBAGRP
PUBLIC                         SAP_DBAERR                     SAPSR3                         DBAERR
PUBLIC                         SAP_DBATRIAL                   SAPSR3                         DBATRIAL
PUBLIC                         SAP_SVERS                      SAPSR3                         SVERS
PUBLIC                         SAP_TGORA                      SAPSR3                         TGORA
PUBLIC                         SAP_IGORA                      SAPSR3                         IGORA
PUBLIC                         SAP_TSORA                      SAPSR3                         TSORA
PUBLIC                         SAP_TAORA                      SAPSR3                         TAORA
PUBLIC                         SAP_IAORA                      SAPSR3                         IAORA
PUBLIC                         SAP_DD02L                      SAPSR3                         DD02L
PUBLIC                         SAP_DD09L                      SAPSR3                         DD09L
PUBLIC                         SAP_DDNTT                      SAPSR3                         DDNTT
PUBLIC                         SAP_DBCHK                      SAPSR3                         DBCHK
PUBLIC                         SAP_DBDIFF                     SAPSR3                         DBDIFF
PUBLIC                         SAP_DBSTATC                    SAPSR3                         DBSTATC
PUBLIC                         SAP_DBSTATTORA                 SAPSR3                         DBSTATTORA
PUBLIC                         SAP_DBSTATIORA                 SAPSR3                         DBSTATIORA
PUBLIC                         SAP_DBSTATHORA                 SAPSR3                         DBSTATHORA
PUBLIC                         SAP_DBSTAIHORA                 SAPSR3                         DBSTAIHORA
PUBLIC                         SAP_DBCHECKORA                 SAPSR3                         DBCHECKORA
PUBLIC                         SAP_DBMSGORA                   SAPSR3                         DBMSGORA
and BIQ has the following output:
O$SURESH-LOCAL\SAPSERVICEBIQ SAPUSER                        O$SURESH-LOCAL\BIQADM         SAPUSER
PUBLIC                         SAP$KSMSP                      SYS                            SAP_$KSMSP
PUBLIC                         SAP$KCBFWAIT                   SYS                            SAP_$KCBFWAIT
PUBLIC                         SAP$BH                         SYS                            SAP_$BH
PUBLIC                         SAP_SDBAH                      SAPSR3DB                       SDBAH
PUBLIC                         SAP_SDBAD                      SAPSR3DB                       SDBAD
PUBLIC                         SAP_DBSTATC                    SAPSR3DB                       DBSTATC
PUBLIC                         SAP_DBSTATTORA                 SAPSR3DB                       DBSTATTORA
PUBLIC                         SAP_DBSTATIORA                 SAPSR3DB                       DBSTATIORA
PUBLIC                         SAP_DBSTATHORA                 SAPSR3DB                       DBSTATHORA
PUBLIC                         SAP_DBSTAIHORA                 SAPSR3DB                       DBSTAIHORA
PUBLIC                         SAP_DBCHECKORA                 SAPSR3DB                       DBCHECKORA
PUBLIC                         SAP_DBMSGORA                   SAPSR3DB                       DBMSGORA
The owner for BIQ has SAPSR3DB (which is Java schema) not sure how that happen. Where as BIP seems like fine with SAPSR3 schema owner. Looks like I need to change the owner ship of the tables from SAPSR3DB to SAPSR3 of those above BIQ tables. How do you change the owner ship for above rows?
My next question would be, what I do to those missing values in BIQ?
Please advice.
Thanks in Advance.
Kumar

Similar Messages

MCOD and DB13 (ORA-01031: insufficient privileges)

Hello Oracle experts,
I have a problem with a MCOD installation.
Situation:
I have an Oracle Real Application Cluster with two database instances (DE1_1 and DE1_2). In database 1 (DE1_1) there are running two SAP systems (DE1 and DE2).
In database 2 (DE1_2) there are running also two SAP systems (QE1 and QE2).
DE1: SAPSR3     (DE1_1 )
DE2: SAPSR4     (DE1_1)
QE1: SAPSR5     (DE1_2)
QE2: SAPSR6     (DE1_2)
DE1 has been the first installation. The next one´s have been DE2 (SAPSR4), QE1 (SAPSR5) and QE2 (SAPSR6).
Complication:
Transaction DB13 is making trouble in the systems DE2, QE1 and QE2.
There is a pop-up containing this information:
SQL Errorcode: 1.031
SELECT beg, funct, sysid, obj, rc, ende, actid, line FROM sap_sdbah
WHERE beg BETWEEN '20110416000000' AND '20110524235959' AND sysid = 'DE1'
ORA-01031: insufficient privileges
I can confirm this popup and reach the DBA Planning Calendar. In the message window there are two error messages:
- An error occurred when processing system DE2
- Function ORA_LOG_READ failed with return code = Other error
Only in the first system (DE1) there are no problems when calling DB13!
Solution:
I already checked the following notes:
Note 134592 - Importing the SAPDBA role (sapdba_role.sql)
--> I executed the script from the note.
Note 834917 - Oracle Database 10g: New database role SAPCONN
--> I executed the script from the note.
And checked this:
SQL> select grantee, granted_role from dba_role_privs
where granted_role in ('SAPDBA', 'SAPCONN');
GRANTEE                        GRANTED_ROLE
SYS                            SAPDBA
OPS$SAPSERVICEDE2              SAPDBA
OPS$SAPSERVICEQE1              SAPDBA
OPS$QE1ADM                     SAPDBA
SAPSR6                         SAPCONN
OPS$ORADE1                     SAPDBA
SAPSR5                         SAPCONN
OPS$QE2ADM                     SAPDBA
OPS$SAPSERVICEQE2              SAPDBA
SYS                            SAPCONN
OPS$DE1ADM                     SAPDBA
GRANTEE                        GRANTED_ROLE
SAPSR3                         SAPCONN
OPS$SAPSERVICEDE1              SAPDBA
SAPSR4                         SAPCONN
SYSTEM                         SAPDBA
OPS$DE2ADM                     SAPDBA
16 rows selected.
Is it correct that there is only ONE ORA<SID>?
The rest is correct regarding the note.
Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
Checked this statement:
SQL> select grantee, granted_role, default_role from dba_role_privs
where grantee = 'SAPSR6';
GRANTEE                        GRANTED_ROLE                   DEF
SAPSR6                         SAPCONN                        YES
It´s correct regarding the note.
Note 91216 - BRBACKUP/SAPDBA: ORA-01031 Insufficient privileges
Checked it!
Note 400241 - Problems with ops$ or sapr3 connect to Oracle
SQL> SELECT OWNER, TABLE_OWNER, TABLE_NAME FROM DBA_SYNONYMS
WHERE SYNONYM_NAME = 'SAPUSER';
OWNER                          TABLE_OWNER
TABLE_NAME
OPS$SAPSERVICEDE1              OPS$DE1ADM
SAPUSER
OPS$SAPSERVICEDE2              OPS$DE2ADM
SAPUSER
OPS$SAPSERVICEQE1              OPS$QE1ADM
SAPUSER
OWNER                          TABLE_OWNER
TABLE_NAME
OPS$SAPSERVICEQE2              OPS$QE2ADM
SAPUSER
It´s correct regarding the note.
Note 113747 - Permissions for DBA tools BR*Tools and SAPDBA
Permissons for BR*Tools are adjusted regarding this note.
It is still not working!!
Any further suggestions? I don´t know exactly what to configure in a MCOD database. Maybe I forgot one thingu2026
Thank you in advance and kind regards,
Geraldine

Well, it's up to you whether or not you consider that a problem.
And it seems SAP doesn't.
The solution for your ORA-01031 probably will be:
In the schema of Oracle user SAPSR3 there are tables SDBAH and SDBAD. Grant full access to Oracle users SAPSR4/5/6.
But afterwards you may encounter another error message.
You have been warned.
Not sure if this is documented anywhere.
And as I wrote, I doubt that it is worth the effort...
It always seemed SAP did not really like nor support MCOD installations. So by now we haven't any of them left.
regards

Error ORA-01031: insufficient privileges when backup via DB13

Hi expert,
Currently, I have system on SuSE 10 SP2 with ECC6 and Oracle 10.2 installed.
Database backup works fine when using BRTOOLS from command line.
Error like this :
BR0278E Command output of 'SHELL=/bin/sh /oracle/I20/920_32/bin/rman
nocatalog':
Recovery Manager: Release 9.2.0.4.0 - Production
Copyright (c) 1995, 2002, Oracle Corporation. All rights reserved.
RMAN>
RMAN> connect target /;
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
ORA-01031: insufficient privileges
RMAN> *end-of-file*
happened when I try to schedule backup through DB13.
I try to solved this with SAP Note 776505 but still doesn't work.
Any suggestion ?
ardhian

Hi,
Execute the following command at sql prompt.
grant dba,resource,connect,sapdba to OPS$<SID>ADM OPS$ORA<SID>
grant dba,resource,connect,sapdba to O OPS$ORA<SID>
grant dba,resource,connect,sapdba to SAPSR3 or SAP<SID>(YOUR SCHEMA NAME)
Also check owner of SAPUSER table
SELECT OWNER FROM DBA_TABLES WHERE TABLE_NAME = 'SAPUSER';
If it returns value OPS$<SID>ADM than its ok, otherwise you have to drop this & recreate with command
CREATE TABLE "OPS$QASADM".SAPUSER
(USERID VARCHAR2(256), PASSWD VARCHAR2(256));
INSERT INTO "OPS$<sid>ADM".SAPUSER VALUES ('<sapowner>',
'<password>');
For more info go through the snote 400241
[https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=400241]
Thanks & Regards
Karan

DB13 jobs errors (ORA-01031: insufficient privileges) after System Copy

Dear SAP gurus,
I performed an ECC60 System copy from Dev to a sandbox system (Linux-Oracle). When I try to access DB13 all jobs are cancelled:
Example of "check and update optimizer statistics" job log:
Job started
Step 001 started (program RSDBAJOB, variant &0000000000001, user ID TGEPOMA1)
Execute logical command BRCONNECT On host eccsbx01
Parameters: -u / -jid STATS20110720050000 -c -f stats -t ALL
BR0801I BRCONNECT 7.00 (46)
BR0805I Start of BRCONNECT processing: cegkmpzk.sta 2011-07-27 05.00.32
BR0484I BRCONNECT log file: /oracle/SBX/sapcheck/cegkmpzk.sta
BR0280I BRCONNECT time stamp: 2011-07-27 05.00.36
BR0301W SQL error -1031 at location brc_dblog_open-1, SQL statement:
'INSERT INTO SAP_SDBAH (BEG, FUNCT, SYSID, OBJ, RC, ENDE, ACTID, LINE) VALUES ('20110727050032', 'sta', 'SBX', 'ALL', '9999', '
ORA-01031: insufficient privileges
BR0324W Insertion of database log header failed
I read the SAP note 400241 (Problems with ops$ or sapr3 connect to Oracle) and performed the general checks such checking the SAPUSER owner,etc.
If I executed the sapdba_role.sql script I get the following log errors on sapdba_role.log:
old   1: grant ALL on &User..SDBAH to sapdba
new   1: grant ALL on SAPR3.SDBAH to sapdba
grant ALL on SAPR3.SDBAH to sapdba
ERROR at line 1:
ORA-00942: table or view does not exist
old   1: grant ALL on &User..SDBAD to sapdba
new   1: grant ALL on SAPR3.SDBAD to sapdba
grant ALL on SAPR3.SDBAD to sapdba
ERROR at line 1:
ORA-00942: table or view does not exist
old   1: grant ALL on &User..DBAML to sapdba
new   1: grant ALL on SAPR3.DBAML to sapdba
grant ALL on SAPR3.DBAML to sapdba
Should I create those tables in order to allow ops$ user to access Oracle DB in order to execute the DB job from DB13?
Please let me know if anybody can help me or has face a situation before?
Thanks in advance, Marc

Hi Markus,
I dont think that it is an authorization issue becasue it has the same authorizations than Development:
eccsbx01:/sapmnt/SBX/exe # ls -ltr br*
-rwsr-srw- 1 orasbx dba    4121272 Jul 19 11:55 brarchive
-rwsr-srw- 1 orasbx dba    4227280 Jul 19 11:55 brbackup
-rwsrwxr-x 1 orasbx sapsys 5489731 Jul 19 11:55 brconnect
-rwxr-xr-x 1 sbxadm sapsys 4537880 Jul 19 11:55 brrecover
-rwxr-xr-x 1 sbxadm sapsys 1554379 Jul 19 11:55 brrestore
-rwxr-xr-x 1 sbxadm sapsys 5617510 Jul 19 11:55 brspace
-rwsrwxr-x 1 orasbx sapsys 2289337 Jul 19 11:55 brtools
Regards, Marc

Check database with error "ORA-01031: insufficient privileges"

Dear Gurus,
        I ran "Check database" in DB13 but I got error "ORA-01031: insufficient privileges"
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
       Note I try to execute sapdba_role.sql (with command "sqlplus /nolog @sapdba_role.sql SR3") as Note 134592 both login 'oradev' and 'devadm' but it seem to do nothing (not found sapdba_role.log)
      Please advice.
Best regards,
Choosak B.
Ps.
detailed log of /oracle/DEV/sapcheck/cecxekdh.chk
BR0801I BRCONNECT 7.00 (40)
BR0477I Oracle pfile /oracle/DEV/102_64/dbs/initDEV.ora created from spfile /oracle/DEV/102_64/dbs/spfileDEV.ora
BR0805I Start of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.30.53
BR0484I BRCONNECT log file: /oracle/DEV/sapcheck/cecxekdh.chk
BR0101I Parameters
Name                           Value
oracle_sid                     DEV
oracle_home                    /oracle/DEV/102_64
oracle_profile                 /oracle/DEV/102_64/dbs/initDEV.ora
sapdata_home                   /oracle/DEV
sap_profile                    /oracle/DEV/102_64/dbs/initDEV.sap
system_info                    devadm/oradev sapdev SunOS 5.10 Generic_142900-03 sun4v
oracle_info                    DEV 10.2.0.4.0 8192 7465 94896497 sapdev UTF8 UTF8
sap_info                       701 SAPSR3 0002LK0003DEV0011N11827599290015Maintenance_ORA
make_info                      sun_64 OCI_102 Feb 21 2009
command_line                   brconnect -u / -jid CHECK20100331123000 -c -f check
alert_log                      /oracle/DEV/saptrace/background/alert_DEV.log
BR0280I BRCONNECT time stamp: 2010-03-31 12.30.56
BR0813I Schema owners found in database DEV:
DBSNMP, DIP, OPS$DEVADM, OPS$ORADEV, OPS$SAPSERVICEDEV, ORACLE_OCM, OUTLN, SAPSR3*, SYS, SYSTEM,
TSMSYS
BR0118I Tablespaces and data files
Tablespace     Status     File                                               Status     Id.        Size      MaxSize     IncrSize BlkSize      Device Type Link
PSAPSR3        ONLINE+    /oracle/DEV/sapdata2/sr3_1/sr3.data1               ONLINE+     4   2411732992 10485760000     20971520     8192    16777219 FILE NOLINK
SYSTEM         ONLINE+    /oracle/DEV/sapdata1/system_1/system.data1         SYSTEM+     1   1017126912 10485760000     20971520     8192    16777219 FILE NOLINK
BR0119I Redo log files
File                                          Status Group       Size       Device Type Link
/oracle/DEV/origlogA/log_g11m1.dbf            INUSE      1    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g11m2.dbf            INUSE      1    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g12m1.dbf            INUSE      2    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g12m2.dbf            INUSE      2    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogA/log_g13m1.dbf            INUSE      3    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogA/log_g13m2.dbf            INUSE      3    52429312     16777218 FILE NOLINK
/oracle/DEV/origlogB/log_g14m1.dbf            INUSE      4    52429312     16777218 FILE NOLINK
/oracle/DEV/mirrlogB/log_g14m2.dbf            INUSE      4    52429312     16777218 FILE NOLINK
BR0120I Control files
File                                                Size       Device Type Link
/oracle/DEV/origlogA/cntrl/cntrlDEV.dbf         15024128     16777218 FILE NOLINK
/oracle/DEV/origlogB/cntrl/cntrlDEV.dbf         15024128     16777218 FILE NOLINK
/oracle/DEV/sapdata1/cntrl/cntrlDEV.dbf         15024128     16777219 FILE NOLINK
BR0982I Database disk volumes
Directory / Raw disk                          Device      Total[KB]      Free[KB]    Used[%]   MaxNeed[KB]   MaxMiss[KB]
/oracle/DEV/102_64                          16777218     480700086     404332206      15.89             0             0
/oracle/DEV                                 16777218     480700086     404332206      15.89             0             0
/oracle/DEV/mirrlogA                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/mirrlogB                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/origlogA                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/origlogB                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapdata1                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata2                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata3                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/sapdata4                        16777219     591212116     404332206      31.61     240019884             0
/oracle/DEV/saparch                         16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapbackup                       16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapcheck                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/sapreorg                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/saptrace                        16777218     480700086     404332206      15.89             0             0
/oracle/DEV/oraarch                         16777218     480700086     404332206      15.89             0             0
BR0280I BRCONNECT time stamp: 2010-03-31 12.31.29
BR0814I Number of tables in schema of owner SAPSR3: 74582
BR0836I Number of info cube tables found for owner SAPSR3: 49
BR0814I Number of tables/partitions in schema of owner SYS: 625/189
BR0814I Number of tables/partitions in schema of owner SYSTEM: 134/27
BR0280I BRCONNECT time stamp: 2010-03-31 12.32.28
BR0815I Number of indexes in schema of owner SAPSR3: 89159
BR0815I Number of indexes/partitions in schema of owner SYS: 678/199
BR0815I Number of indexes/partitions in schema of owner SYSTEM: 175/32
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0816I Number of segments in schema of owner DBSNMP: 25
BR0816I Number of segments in schema of owner OPS$DEVADM: 1
BR0816I Number of segments in schema of owner OUTLN: 9
BR0816I Number of segments/LOBs in schema of owner SAPSR3: 168369/2314
BR0816I Number of segments/LOBs in schema of owner SYS: 1831/87
BR0816I Number of segments/LOBs in schema of owner SYSTEM: 353/22
BR0816I Number of segments in schema of owner TSMSYS: 4
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0961I Number of conditions found in DBCHECKORA: 118
BR0983I Tablespace fragmentation
Tablespace    Files   Tables Indexes    Extents     Total[KB]   Used[%]     Free[KB]   FreeExt.   MaxSize[KB]   MaxAlloc[KB]   Used[%]       Free[KB]       Largest[KB]
PSAPSR3          16    74248    88689     209864     54138880     94.51      2970752        240     163840000+     109701120+    31.23+     112671872+       9246720:7966720:7946240:7905280:7905280+
PSAPSR3701       14        0        0          0     54466560      0.00     54465664         20     143360000+      88893440+     0.00+     143359104+       9021440:8192000:8192000:8192000:8192000+
PSAPSR3701X       4      310      445      12190     68342784     94.20      3962240          7      68342784              0     94.20        3962240        1298432:1191936:979968:163776:163776
PSAPSR3USR        1       24       25         51        51200      6.50        47872          1      10240000+      10188800+     0.03+      10236672+      10188800+:47872:0:0:0
PSAPTEMP          1        0        0          0      1433600      0.00      1433600          0      10240000+       8806400+     0.00+      10240000+       8806400+:0:0:0:0
PSAPUNDO          1        0        0          0      7823360      0.00      7823296        406      10240000+       2416640+     0.00+      10239936+       2416640+:2041792:1814464:1433536:603072
SYSAUX            1      254      284       2059       307200     93.35        20416         16      10240000+       9932800+     2.80+       9953216+       9932800+:13248:3072:1024:640
SYSTEM            1      505      569       2926       993280     98.91        10816          2      10240000+       9246720+     9.59+       9257536+       9246720+:10176:640:0:0
Total:           39    75341    90012     227090    187556864     62.29     70734656        692     426742784      239185920     27.38      309920576       60157952:19463744:18936384:17695616:16864768
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
'PREPARE stmt_5 STATEMENT FROM'
'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
ORA-01031: insufficient privileges
BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
BR0804I BRCONNECT terminated with errors

Hi,
       It solved after change permission of directory that sapdba_role.sql kept to oradev:dba after that it can write sapdba_role.log.
      Thank you for your guideline.
      Now, I can ran 'Check database' via DB13 without that error.
Best regards,
Choosak B.

ORA-01031: insufficient privileges in oracle 10.2 in windows 2008r2

Dear All,
We have install SAP ecc6 EHP4 on oracle 10.2.0.5 on windows 2008R2
whenever we schedule any activity in db13 we are getting below error .
=================================
Job started
Step 001 started (program RSDBAJOB, variant &0000000000059, user ID PARESH)
Execute logical command BRBACKUP On host IRDAECCDEV
Parameters:-u / -jid FLL__20110922104226 -c force -t online -m full -p initieq_online.sap
BR0051I BRBACKUP 7.20 (3)
BR0055I Start of database backup: begvgwgh.fnf 2011-09-22 10.42.27
BR0484I BRBACKUP log file: K:\oracle\IEQ\sapbackup\begvgwgh.fnf
BR0280I BRBACKUP time stamp: 2011-09-22 10.42.28
BR0301E SQL error -1031 at location BrInitOraCreate-2, SQL statement:
'CONNECT / AT PROF_CONN IN SYSOPER MODE'
ORA-01031: insufficient privileges
BR0303E Determination of Oracle version failed
=================================
As per sap note 400421 i have carry out all the check and all are perfect.
Also i have check below notes and every thing are fine
Note 834917 - Oracle Database 10g: New database role SAPCONN
Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
Note 700548 - FAQ: Oracle authorizations
Also i have check the note which suggest to run the sapdba_role.sql script
But still i am getting the same error.
Also SAPSID services is running with user id sapserviceSID and i change it to SIDadm but no lock.
Request you please help me in this regard.
Sincerely
Paresh

As expected
This is really a very small problem but very weird we suffered so many times. May be we should confirm the authorizations for SAPServiceSID and sidadm users on that windows host, sometimes we miss this part in Windows to check.
Kernel folders should be proper accessible by both of the users. Also, please keep SAP instance service via SAPServiceSID itself.
Just to reconfirm - you restarted SAP and restarted SAP/Oracle services as well, right ?
Thanks

ORA-01031: insufficient privileges and SAP license issue

Hi,
We have successfully installed the NW7.31 with ORACLE 11.2.0.4 on AIX.
Its a fresh installed system, after installation we have applied the saplicense through SLICENSE and after that upgrade the kernel(We have run the ./saproot.sh <SAPSID> with root user).
Kernels are upgraded successfully, we have checked the disp+work, kernel patch level is upgraded successfully.
SAP is started normally, but now we are facing two issues on OS level.
1. Issue is regarding to the saplicense command....
abcadm 4> saplicense -show
saplicense: no license entries found
abcadm 5> saplicense -number
saplicense: read installation number failed
*** Can not read profile parameter SAPSYSTEMNAME
Start saplicense with -number NAME=<sid>
abcadm 6> saplicense -number NAME=ABC
Read installation number for SAP SYSTEM: ABC
INSTALLATION NO = INITIAL
2. When we are trying to run the Update statistics on database with DB13 command following error occurs. Even i have tried via brtools but still following error occures.
BR0301E SQL error -1031 at location BrLicCheck-12, SQL statement:
'SELECT MAX(SYSTEMNAME), MAX(SYSID) FROM SAP_MLICHECK WHERE EXPIRATION_DATE = (SELECT MAX(EXPIRATION_DATE) FROM SAP_MLICHECK)'
ORA-01031: insufficient privileges
I have checked the R3trans -d it working fine.
oraabc 15> R3trans -d
This is R3trans version 6.24 (release 721 - 08.05.14 - 16:50:00).
unicode enabled version
R3trans finished (0000).
In SLICENSE tcode it showing the license entries but when we are run the command from os level "saplicense", it didnt found any license entry.
Kindly suggest.
regards,
amit

Hi Deepak,
NW SP level as follows.............
SAP_BASIS
731
0011
SAP_ABA
731
0011
PI_BASIS
731
0011
ST-PI
2008_1_710
0010
SAP_BW
731
0011
SAP Kernel as follows....................
kernel release                721
kernel make variant           721_EXT_REL
compiled on                   AIX 1 6 00CFADC14C00 for rs6000_64
compiled for                  64 BIT
compilation mode              UNICODE
compile time                  May 27 2014 03:48:09
update level                  0
patch number                  300
source id                     0.300
DBATOOLS level as follows...............
oraabc 12> brtools
BR0651I BRTOOLS 7.20 (36)
regards,
amit

Ora-01031 insufficient privileges in oracle

Hi All,
I have a case where in i have upgraded my oracle 10.2.0.2 to 10.2.0.4 in solaris env.
After upgrade i am able to start and use the system but when i schedule a job in DB13 for ex update statis. it is giving an error
ora-01031 insufficient privileges in oracle.
Please let me know how to go about it, as i am doing an EHP4 upgrade on same system.
Thanks & Regards,
Balaji.S

Balaji,
Check SAP Note 1028220 - ORA-01031: Insufficient privileges despite SAPCONN role
SAP note 134592 sapdba_role.sql
Also see below threads. It may help you.
ORA-01031: insufficient privileges
ORA-01031: insufficient privileges
Brconnect Error
Thanks,
Sushil

ORA-01031 (Insufficient Privileges) after moving server to new domain

Hello SAP/Oracle experts,
We recently performed a 'lift & shift' to move our SAP test system (QAS) from our HQ to our hosting partner's data centre. Although SAP works fine, we've lost the ability to run database operations through DB13. We now receive ORA-01031 - Insufficient Privileges errors whenever we try anything through DB13.
Because moving the server involved changing the Windows domain to which it belonged, we created a trust relationship between old and new domains so that we didn't have to change the details of QASADM and SAPServiceQAS. We ran the usual oradbuser.sql and sapdba_role.sql scripts. We also removed and reassigned the ORA_QAS_DBA and ORA_QAS_OPER groups to the QASADM and SAPServiceQAS users. All of which seems to have made no difference and we still get ORA-01031 errors in DB13.
Even stranger though is the fact that at the Oracle level, user sys is able to log in 'as sysdba', whilst user system cannot. e.g.
sqlplus sys/<password>@qas as sysdba Works.
sqlplus sys/<password> as sysdba Works.
sqlplus / as sysdba Doesnt work
sqlplus system/<password>@qas as sysdba Doesnt work.
sqlplus system/<password> as sysdba Doesnt work.
This leads me to believe that the problem is not SAP-related (i.e. sapdba_role won't fix it!), but is more likely Oracle-related and perhaps down to the fact that ths system was built in one domain, but now resides in another. I guess the easiest thing to do would be to create QASADM and SAPServiceQAS accounts in the new domain and try that, but that's clutching at straws and doesn't explain why Oracle user sys works, whilst system doesn't.
Has anyone moved servers between domains and experienced similar problems?
Thanks in advance of any help,
Arwel.

is the recommended procedure when moving SAP Systems (or the server where they installed on) from one Domain to the next one (at least if the user accounts are in the same domain as the Server).
You have following dependencies when installing in a domain:
1. domain groups
2. local groups containing domain groups and/or domain accounts
3. Domain Accounts
4. maybe domain groups are used in Access Control Lists of local Files / Directories
5. User rights Assignment in registry
6. as in Oracle Database internal users reflecting Operating System users.
In Windows Security Objects (ACLs of Files, Directories) a Windows Account is referenced by it's SID which is unique (you can have a look at those strings in Upper Keys of the Registry HKEY_USERS). This means that a Domain User XYZ in Domain A has a different SID than Domain User XYZ in Domain B. The same applies to Windows Groups.
As a result of this c:\documents and Settings\XYZ will not be for the use with the same name if you move the computer to a diferent domain.
Windows will create something like c:\documents and Settings\XYZ.NEW_DOMAIN. As a result of this all envrionment variables of XYZ in the old domain are not visible in the new domain, because they are stored in the users registry which resides in c:\documents and Settings\XYZ\ntuser.dat in the old domain and c:\documents and Settings\XYZ.NEW_DOMAIN\ntuser.dat in the new domain.
Too many things to do, to many possibilities you can make mistakes - therefore --> homogenious system copy.
regards
Peter

ORA-01031: insufficient privileges in PL/SQL but not in SQL

I have problem with following situation.
I switched current schema to another one "ban", and selected 4 rows from "ed"
alter session set current_schema=ban;
SELECT * FROM ed.PS WHERE ROWNUM < 5;
the output is OK, and I get 4 rows like
ID_S ID_Z
1000152 1
1000153 1
1000154 1
1000155 1
but following procedure is compiled with warning
create or replace
procedure proc1
as
rowcnt int;
begin
select count(*) into rowcnt from ed.PS where rownum < 5;
end;
"Create procedure, executed in 0.031 sec."
5,29,PL/SQL: ORA-01031: insufficient privileges
5,2,PL/SQL: SQL Statement ignored
,,Total execution time 0.047 sec.
Could you help me why SELECT does work in SQL but not in PL/SQL procedure?
Thanks.
Message was edited by:
MattSk

Privs granted via a role are only valid from SQL - and not from/within stored PL/SQL code.
Quoting Tom's (from http://asktom.oracle.com) response to this:I did address this role thing in my book Expert one on one Oracle:
<quote>
What happens when we compile a Definer rights procedure
When we compile the procedure into the database, a couple of things happen with regards to
privileges. We will list them here briefly and then go into more detail:
q    All of the objects the procedure statically accesses (anything not accessed via dynamic SQL)
are verified for existence. Names are resolved via the standard scoping rules as they apply to the
definer of the procedure.
q    All of the objects it accesses are verified to ensure that the required access mode will be
available. That is, if an attempt to UPDATE T is made - Oracle will verify the definer or PUBLIC
has the ability to UPDATE T without use of any ROLES.
q    A dependency between this procedure and the referenced objects is setup and maintained. If
this procedure SELECTS FROM T, then a dependency between T and this procedure is recorded
If, for example, I have a procedure P that attempted to 'SELECT * FROM T', the compiler will first
resolve T into a fully qualified referenced. T is an ambiguous name in the database - there may be
many T's to choose from. Oracle will follow its scoping rules to figure out what T really is, any
synonyms will be resolved to their base objects and the schema name will be associated with the
object as well. It does this name resolution using the rules for the currently logged in user (the
definer). That is, it will look for an object owned by this user called T and use that first (this
includes private synonyms), then it will look at public synonyms and try to find T and so on.
Once it determines exactly what T refers to - Oracle will determine if the mode in which we are
attempting to access T is permitted.   In this case, if we as the definer of the procedure either
owns the object T or has been granted SELECT on T directly or PUBLIC was granted SELECT, the
procedure will compile. If we do not have access to an object called T by a direct grant - the
procedure P will fail compilation. So, when the object (the stored procedure that references T) is
compiled into the database, Oracle will do these checks - and if they "pass", Oracle will compile
the procedure, store the binary code for the procedure and set up a dependency between this
procedure and this object T. This dependency is used to invalidate the procedure later - in the
event something happens to T that necessitates the stored procedures recompilation. For example,
if at a later date - we REVOKE SELECT ON T from the owner of this stored procedure - Oracle will
mark all stored procedures this user has that are dependent on T, that refer to T, as INVALID. If
we ALTER T ADD some column, Oracle can invalidate all of the dependent procedures. This will cause
them to be recompiled automatically upon their next execution.
What is interesting to note is not only what is stored but what is not stored when we compile the
object. Oracle does not store the exact privilege that was used to get access to T. We only know
that procedure P is dependent on T. We do not know if the reason we were allowed to see T was due
to:
q    A grant given to the definer of the procedure (grant select on T to user)
q    A grant to public on T (grant select on T to public)
q    The user having the SELECT ANY TABLE privilege
The reason it is interesting to note what is not stored is that a REVOKE of any of the above will
cause the procedure P to become invalid. If all three privileges were in place when the procedure
was compiled, a revoke of ANY of them will invalidate the procedure - forcing it to be recompiled
before it is executed again. Since all three privileges were in place when we created the procedure
- it will compile successfully (until we revoke all three that is). This recompilation will happen
automatically the next time that the procedure is executed.
Now that the procedure is compiled into the database and the dependencies are all setup, we can
execute the procedure and be assured that it knows what T is and that T is accessible. If something
happens to either the table T or to the set of base privileges available to the definer of this
procedure that might affect our ability to access T -- our procedure will become invalid and will
need to be recompiled.
This leads into why ROLES are not enabled during the compilation and execution of a stored
procedure in Definer rights mode. Oracle is not storing exactly WHY you are allowed to access T -
only that you are. Any change to your privileges that might cause access to T to go away will cause
the procedure to become invalid and necessitate its recompilation. Without roles - that means only
'REVOKE SELECT ANY TABLE' or 'REVOKE SELECT ON T' from the Definer account or from PUBLIC. With
roles - it greatly expands the number of times we would invalidate this procedure. If some role
that was granted to some role that was granted to this user was modified, this procedure might go
invalid, even if we did not rely on that privilege from that role. ROLES are designed to be very
fluid when compared to GRANTS given to users as far as privilege sets go. For a minute, let's say
that roles did give us privileges in stored objects. Now, most any time anything was revoked from
ANY ROLE we had, or any role any role we have has (and so on -- roles can and are granted to roles)
-- many of our objects would become invalid. Think about that, REVOKE some privilege from a ROLE
and suddenly your entire database must be recompiled! Consider the impact of revoking some system
privilege from a ROLE, it would be like doing that to PUBLIC is now, don't do it, just think about
it (if you do revoke some powerful system privilege from PUBLIC, do it on a test database). If
PUBLIC had been granted SELECT ANY TABLE, revoking that privilege would cause virtually every
procedure in the database to go invalid. If procedures relied on roles, virtually every procedure
in the database would constantly become invalid due to small changes in permissions. Since one of
the major benefits of procedures is the 'compile once, run many' model - this would be disastrous
for performance.
Also consider that roles may be
q    Non-default: If I have a non-default role and I enable it and I compile a procedure that
relies on those privileges, when I log out I no longer have that role -- should my procedure become
invalid -- why? Why not? I could easily argue both sides.
q    Password Protected: if someone changes the password on a ROLE, should everything that might
need that role be recompiled? I might be granted that role but not knowing the new password - I
can no longer enable it. Should the privileges still be available? Why or Why not? Again, arguing
either side of this is easy. There are cases for and against each.
The bottom line with respect to roles in procedures with Definer rights are:
q    You have thousands or tens of thousands of end users. They don't create stored objects (they
should not). We need roles to manage these people. Roles are designed for these people (end users).
q    You have far fewer application schema's (things that hold stored objects). For these we want
to be explicit as to exactly what privileges we need and why. In security terms this is called the
concept of 'least privileges', you want to specifically say what privilege you need and why you
need it. If you inherit lots of privileges from roles you cannot do that effectively. We can manage
to be explicit since the number of development schemas is SMALL (but the number of end users is
large)...
q    Having the direct relationship between the definer and the procedure makes for a much more
efficient database. We recompile objects only when we need to, not when we might need to. It is a
large efficiency enhancement.
</quote>

ORA-01031: insufficient privileges and shared memory realm does not exist

Hi all,
I came to a dead end to start oracle 10.2 database. I have searched on google and this forum, none of these solutions work for me. PS, I have installed 11g on my machine too.
I have set up ORACLE_SID,ORACLE_HOME to 10.2 database based on the tnsnames.ora.
follow is error message：
sqlplus sys as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:09:54 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-01031: insufficient privileges
sqlplus /nolog
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:10:55 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> conn / as sysdba
ERROR:
ORA-01031: insufficient privileges
SQL> conn scott/tiger
ERROR:
ORA-01034: ORACLE not available
ORA-27101: shared memory realm does not exist
Linux-x86_64 Error: 2: No such file or directory
First I thought the instance has been start yet, but since I can't login with sysdba. I don't know what other options.
For 10.2, the tnsnames.ora
ORA102 =
+(DESCRIPTION =+
+(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
+(CONNECT_DATA =+
+(SERVER = DEDICATED)+
+(SERVICE_NAME = ora102)+
+)+
+)+
LISTENER_ORA102 =
+(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
EXTPROC_CONNECTION_DATA =
+(DESCRIPTION =+
+(ADDRESS_LIST =+
+(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))+
+)+
+(CONNECT_DATA =+
+(SID = PLSExtProc)+
+(PRESENTATION = RO)+
+)+
+)+
listener.ora:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /data/oracle/ora102)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))
(ADDRESS = (PROTOCOL = TCP)(HOST =XXXXX)(PORT = 1523))
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
)

try do this steps on server side:
1) sqlplus sys as sysdba
2) select open_mode from v$database;
show result 2 step

Error while Creating Master Repository: ORA-01031: insufficient Privileges

Hi,
I'm trying to install ODI into my VM.
I have done the installation and while creating Master Repository, I'm getting following error:
ORA-01031: insufficient Privileges
I'm using Oracle & have created user as ODI_MASTER with Admin Privileges.
I'll be using it to load metadata onto planning (Version 11.1.2)
Is there anything that I'm missing out on.
Jitendra.

Seems missing grants on the user you are using to create Master Repository.
you are using Oracle .. grant connect, resource to <your_user>. These two rolesa have sufficient access to db to create the master repository.
execuute the sql from sys user
Regards,
Amit
Edited by: amitgupta1202 on 20 Aug, 2009 10:42 PM

ORA-01031: insufficient privileges

Hi Everyone,
I am facing a weird scenario. In this I am creating a test user and after creating and granting the required privilieges I am executing a procedure in this user.
The steps are as follows:
SQL> REM ***
SQL> connect sys/**** as sysdba
Connected.
SQL> REM ****
SQL> REM grant privileges to the test user
SQL> grant connect, resource, create table, create view, alter session,
2 create sequence, create session, create procedure to tester ;
Grant succeeded.
SQL> grant unlimited tablespace to tester ;
Grant succeeded.
SQL> grant execute on dbms_lock to tester ;
Grant succeeded.
SQL> grant create any procedure to tester ;
Grant succeeded.
SQL>
SQL> connect tester/tester
ERROR:
ORA-01031: insufficient privileges
Warning: You are no longer connected to ORACLE.
SQL> set serveroutput on
SQL> REM ******
SQL> declare
<block of code>
SP2-0640: Not connected
SQL> SQL>
I am executing this process in loop for about 4 times and each time the test user is connected successfully in 1st and 4th run while in 2nd and 3rd run it throws privileges error? Any idea why this error is ocurring?

SQL> create user test identified by test ;
User created.
SQL> grant connect, resource, create table, create view, alter session,create sequence, create session, create procedure to test;
Grant succeeded.
SQL> conn test/test ;
Connected.
SQL>

ORA-01031: insufficient privileges when creating a table in other schema

Dear all,
I appreciate your help please in this issue :
when i try to issue the below statement to create a table in an another schema than the user i am connected in
CREATE TABLE SCHEMA_NAME_B.HST_ARCH nologging AS
SELECT *
FROM HST
WHERE 1 = 0;
I always get ORA-01031: insufficient privileges error, even if i have granted the create table privilege to the user i am connected in.
What other privileges should i grant also,
Please if you have any idea.

user562674 wrote:
Dear all,
I appreciate your help please in this issue :
when i try to issue the below statement to create a table in an another schema than the user i am connected in
CREATE TABLE SCHEMA_NAME_B.HST_ARCH nologging AS
SELECT *
FROM HST
WHERE 1 = 0;
I always get ORA-01031: insufficient privileges error, even if i have granted the create table privilege to the user i am connected in.
What other privileges should i grant also,
Can you show us a cut/paste from the sql*plus of session of yours which should show that you have given the privilege directly to this user and after that the command fails?
Aman....

Ora-01031: Insufficient Privileges error during 10g install on Suse 9.1

I have tried installing Oracle 10g on Suse 9.1 Professional several times. Although I have tried to carefully follow the instructions in the installation guide, I get the following error.
When the Database Configuration Assistant start during the initial installation, I receive the error -> Ora-01031: Insufficient Privileges.
I created the oinstall and dba group according to the installation guide and made oracle a member with oinstall being the primary group. I also ran -> chown -R oracle:oinstall -> on the Oracle_Base folder to which I want to install the software and oradata files. Similarly, I ran -> chmod -R 775 -> on that folder. During the install I ran the script -> oracle_base/oraInventory/orainstRoot.sh -> during the installation when prompted.
I would really appreciate any help that any of you could provide. Thank you so much in advance.
-Daniel

I'm logged in as oracle when I perform the installation but as soon as the database configuration assistant tries to create the database I get this error. I had made oracle a member of oinstall and dba just as it was desribed in the instructions. (At one point I even tried giving oracle root, which didn't seem to work either. I have since reinstalled the OS.)
Thank you for helping me with this!

DB13: ORA-01031: insufficient privileges

Similar Messages

Maybe you are looking for