Default role created by oracle

during oracle installation will there be any default role being created?
How should i identify them ?

Master Note For Privileges And Roles (Doc ID 1347470.1)

Similar Messages

Assigning Default Role to New Users created

Hi
How can we assign a default Role to any new User created.
This Role should automatically get assigned whenever a new User is created.
Regards

Hello,
for ABAP Stack users you can just create a reference user with the according roles and copy new users from it.
Regards
Christian

Default role missing options in new gallery

I am new to JDeveloper 11g. When accessing the software, I am selecting the "Default role" from the intial roles dialog. When selecting File / New, I get the following options only:
General
- Applications
- Connections
- Deployment Descriptors
- Projects
Business Tier
- Web Services
Client Tier
- Extension Development
Database Tier
- Offline Database Objects
All Items
The help for New Gallery suggests I should be seeing much more than this (UML, XML, TopLink etc.) when logged in under the default role. Can anyone suggest what might be wrong? Is there a config file I can look at or update?
I am running JDeveloper 11g on Windows XP SP3. The version of 11g is:
Oracle JDeveloper 11g 11.1.1.0.1
Studio Edition Version 11.1.1.0.1
Build JDEVADF_MAIN.BOXER_GENERIC_081203.1854.5188
Copyright © 1997, 2008 Oracle. All Rights Reserved.
IDE Version: 11.1.1.0.31.51.88
Product ID: oracle.jdeveloper
Product Version: 11.1.1.0.31.51.88
Any help gratefully received.

User,
All of the things you mention require a project; so, first create an application and a project; then, ensure the Technology Scope for the project matches what you want to do (right-click, properties, technology scope). Then, you should see all of the things you mention.
John

Default role with password - reality check

I support the database for an application. We upgraded from Oracle10 to Oracle11 9 months ago. Then recently we applied the OCT CPU.
The application admin says that they have a program that has recently stopped working that worked after the Oracle11 upgrade.
The application user has a default role which has a password. Is that possible? A default role with a password. Would this have ever worked in any version of Oracle?

Default role with password is a feature even available with Oracle XE. Default roles are activated without requiring role password in Oracle 10.2:
SQL> drop user admin cascade;
User dropped.
SQL> drop user test cascade;
User dropped.
SQL> drop role rwp;
Role dropped.
SQL> select * from v$version;
BANNER
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Product
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for 32-bit Windows: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
SQL>
SQL> create user admin identified by oraclexe;
User created.
SQL> grant create session, create table to admin;
Grant succeeded.
SQL> grant unlimited tablespace to admin;
Grant succeeded.
SQL> grant create user to admin;
Grant succeeded.
SQL> grant create role to admin;
Grant succeeded.
SQL>
SQL> create user test identified by oraclexe;
User created.
SQL> grant create session to test;
Grant succeeded.
SQL>
SQL> connect admin/oraclexe;
Connected.
SQL> create table t(x varchar2(10));
Table created.
SQL> insert into t values('admin OK');
1 row created.
SQL> commit;
Commit complete.
SQL> create role rwp identified by oraclexe;
Role created.
SQL> grant all on t to rwp;
Grant succeeded.
SQL> grant rwp to test;
Grant succeeded.
SQL>
SQL> connect test/oraclexe;
Connected.
SQL> select * from session_roles;
ROLE
RWP
SQL> select * from admin.t;
X
admin OK
SQL> insert into admin.t values('test OK');
1 row created.
SQL> commit;
Commit complete.
SQL> select * from admin.t;
X
admin OK
test OK
SQL>There have been changes between Oracle 10.2 and 11.2 because the same script fails in 11.2 unless the role is set with the password:
SQL> drop user admin cascade;
User dropped.
SQL> drop user test cascade;
User dropped.
SQL> drop role rwp;
Role dropped.
SQL> select * from v$version;
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
PL/SQL Release 11.2.0.1.0 - Production
CORE 11.2.0.1.0 Production
TNS for Linux: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
SQL>
SQL> create user admin identified by oraclexe;
User created.
SQL> grant create session, create table to admin;
Grant succeeded.
SQL> grant unlimited tablespace to admin;
Grant succeeded.
SQL> grant create user to admin;
Grant succeeded.
SQL> grant create role to admin;
Grant succeeded.
SQL>
SQL> create user test identified by oraclexe;
User created.
SQL> grant create session to test;
Grant succeeded.
SQL>
SQL> connect admin/oraclexe;
Connected.
SQL> create table t(x varchar2(10));
Table created.
SQL> insert into t values('admin OK');
1 row created.
SQL> commit;
Commit complete.
SQL> create role rwp identified by oraclexe;
Role created.
SQL> grant all on t to rwp;
Grant succeeded.
SQL> grant rwp to test;
Grant succeeded.
SQL>
SQL> connect test/oraclexe;
Connected.
SQL> select * from session_roles;
no rows selected
SQL> select * from admin.t;
select * from admin.t
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> insert into admin.t values('test OK');
insert into admin.t values('test OK')
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> commit;
Commit complete.
SQL> select * from admin.t;
select * from admin.t
ERROR at line 1:
ORA-00942: table or view does not exist
SQL>
SQL> set role rwp identified by oraclexe;
Role set.
SQL> select * from session_roles;
ROLE
RWP
SQL> select * from admin.t;
X
admin OK
SQL> insert into admin.t values('test OK');
1 row created.
SQL> commit;
Commit complete.
SQL> select * from admin.t;
X
admin OK
test OK
SQL>10.2 Security Guide says:
If you are granted a role protected by a password, then you can enable or disable the role by supplying the proper password for the role in a SET ROLE statement. However, if the role is made a default role and enabled at connect time, then the user is not required to enter a password.
11.1 and 11.2 Secuirty Guide says:
If a user is granted a role protected by a password, then you can enable or disable the role by supplying the proper password for the role in the SET ROLE statement. You cannot authenticate a password-authenticated role on logon, even if you add it to the list of default roles. You must explicitly enable it with the SET ROLE statement using the required password.
Edited by: P. Forstmann on 20 févr. 2010 10:28

ALTER USER USERNAME DEFAULT ROLE ALL;

Hi,
I want to know, what is the meaning of "ALTER USER CARDS DEFAULT ROLE ALL"

It's easy to understand things when you try them,
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production
With the Partitioning, Oracle Label Security, OLAP, Data Mining
and Real Application Testing options
SQL> grant connect to newuser identified by newuser;
Grant succeeded.
SQL> conn newuser/newuser
Connected.
SQL> select * from session_roles;
ROLE
CONNECT
SQL> conn / as sysdba
Connected.
SQL> create role new_user;
Role created.
SQL> grant select any table to new_user;
Grant succeeded.
SQL> grant new_user to newuser;
Grant succeeded.
SQL> conn newuser/newuser
Connected.
SQL> select * from session_roles;
ROLE
CONNECT
NEW_USER
SQL> conn / as sysdba
Connected.
SQL> alter user newuser default role connect;
User altered.
SQL> conn newuser/newuser
Connected.
SQL> select * from session_roles;
ROLE
CONNECT
SQL> set role new_role;
set role new_role
ERROR at line 1:
ORA-01919: role 'NEW_ROLE' does not exist
SQL> set role new_user;
Role set.
SQL> select * from scott.dept;
    DEPTNO DNAME          LOC
        10 ACCOUNTING     NEW YORK
        20 RESEARCH       DALLAS
        30 SALES          CHICAGO
        40 OPERATIONS     BOSTONHTH
Aman....

Default roles and grants

I have role called role_test and this is granted to user user_test and made it as default role.
but role_test is protected by password i.e to set role need to give password.
set role role_test identified by test_role_pass;
My question is when the user user_test loggs in will automatically gets this role_test as it is grated as default role ?
or still he needs to call set role identified by password to enable this role.
I am using oracle 11g database.Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
Is there any change of this behaviour with oracle versions 10g to 11g ?
Thanks,
Phani

Phani_Orcl wrote:
Is there any change of this behaviour with oracle versions 10g to 11g ?Yes, there is. Password protected roles in 11g are not enabled at login time even if it is a default role:
SQL> create role r1;
Role created.
SQL> create role r2 identified by r2;
Role created.
SQL> create user u1 identified by u1
2 /
User created.
SQL> grant create session to u1
2 /
Grant succeeded.
SQL> grant r1,r2 to u1
2 /
Grant succeeded.
SQL> alter user u1 default role all
2 /
User altered.
SQL> connect u1/u1
Connected.
SQL> select * from session_roles;
ROLE
R1
SQL>
And it is documented
Authorizing a Role by Using the Database
You can protect a role authorized by the database by assigning the role a password. If a user is granted a role protected by a password, then you can enable or disable the role by supplying the proper password for the role in the SET ROLE statement. <font color=red>You cannot authenticate a password-authenticated role on logon, even if you add it to the list of default roles. You must explicitly enable it with the SET ROLE statement using the required password.</font>
SY.

Creation of BP with default role

Hi ,
   I have a requiement where in I want a Business Partner to be created with a default role ,i.e CRM006. I can do this in GUI with the help of authorizations.
But the same does not work in PCUI.
My requirement is whenever a user creates a Business Partner, Role CRM006 automatically gets assigned to it.
please sugest something.
Help will be apreciated.
Regards
Sourabh Verma

Hi PREMKUMAR LNS,
you can easily implement BADI: BADI_CRM_BP_UIU_DEFAULTS
IF_UIU_BP_DEFAULTS~GET_DEFAULT_VALUES
and write something like this:
assign cr_me->('TYPED_CONTEXT') to <typed_context>.
if sy-subrc = 0.
    lr_typed_context ?= <typed_context>.
    if lr_typed_context is bound.
      assign lr_typed_context->('HEADER') to <context_node>.
      if sy-subrc = 0.
        try.
            lr_node            ?= <context_node>.
          catch cx_sy_move_cast_error. "EC_NOHANDLER
        endtry.
        if lr_node is bound.
          lr_coll_wrapper ?= lr_node->collection_wrapper.
          if lr_coll_wrapper is bound.
            try.
                lr_current ?= lr_coll_wrapper->get_current( ).
                check lr_current is bound.
controllo la tipologia di account
                zbp_category = lr_current->get_property_as_string( 'BP_CATEGORY' ).
               zbp_group    = lr_current->get_property_as_string( 'BP_GROUP' ).
                if zbp_category = '1'.
                elseif zbp_category = '2'.
              Set default role at creation to "Relation"
                   break domino.
                    zobp_category = lr_current->get_property_as_string( 'BP_ROLE' ).
                    if zobp_category is initial.
Here you are setting the default role
                  lr_current->set_property( iv_attr_name = 'BP_ROLE'
                                   iv_value = 'BUP002' ).
                    endif.
                else.
                endif.
              catch cx_sy_move_cast_error.
            endtry.
          endif.
        endif.
      endif.
    endif.
endif.

How to Create an Oracle BAM Server Connection?

I m following the steps at the end of this post to create the connection but at the end I m getting this message from JDev:
{Unable to write to
/C:/JDeveloper/mywork/Application1/.adf/META-INF/connections.xml
because it is a read-only. Either make it writable or allow it to be made writable through source control.}
it creates the directory C:/JDeveloper/mywork/Application1/.adf/META-INF/ with only a adf-config.xml file but NOT the connections.xml any one knows what is wrong?
Bellow is the stpes I m following. Its exactly what is written at the Oracle Fusion Middleware Developer´s guide for Oracle SOA Suite 11g Release 1(11.1.1) E10224-01
To create an Oracle BAM connection:
1. Select New from the File main menu in Oracle JDeveloper.
The New Gallery dialog opens.
2. Choose Connections from the General category.
3. Select BAM Connection in the Items list, and click OK.
The BAM Connection wizard opens.
4. Provide a name for the connection. Leave the Create Connection In selection as
Application Resources.
5. Click Next.
6. Enter the following connection information about the Oracle BAM instance.
7. Click Next.
8. Test the connection by clicking Test Connection. If the connection was successful,
the following message appears:
Passed.
9. Click Finish.
Note: You can create connections to Oracle BAM in the Oracle
JDeveloper Resource Palette as well as the Application Resources
panel of a specific application. It is recommended that you create these
connections in the Application Resources pane rather than the
Resource Palette.
Field Description
BAM Web Host Enter the name of the host on which the BAM report server and
Web server are installed. In most cases, the BAM Web host and
Oracle BAM Server host are the same.
BAM Server Host Enter the name of the host on which the Oracle BAM Server is
installed.
User Name Enter the Oracle BAM Server user name (typically bamadmin).
Password Enter the password of the user name.
HTTP Port Enter the port number or accept the default value of 8888. This is
the HTTP port for the BAM Web host.
RMI Port Enter the port number or accept the default value of 9085. The
RMI port is for the BAM report cache, which is part of the Oracle
BAM Server.
Use HTTPS Select this check box if you want to use secure HTTP (HTTPS) to
connect to the Oracle BAM Server during design time.
Otherwise, HTTP is used.
Message was edited by:
Mario.Mesquita

Ok that will be nice, but is not the case I dont want to read the tutorial, the problem is I already start to read and execute the tutorial you told me the problem is this tutorial it doesnt show how to do everything from scratch because you already have inside the zip file everything like xmls etc etc, and I want to get my DO and create the process myself, I dont want to get something that it is already done, this tutorial does not show for example how to create this composite.xml, this file it is already inside the zip file, so this way I just follow half of the process and dont learn how to make the whole process.
tks

GRC 10.0 - Auto Approve default roles

Hello All,
Could you please help out me in the below scenarios.
     1) We have maintained default roles in NBWC- Access Management - Default roles.
     Also set the parameter 2038 to Yes- Auto approve roles without approver.
In MSMP we have maintained Escape path if approver is not found at the role level.
As default roles have no approver maintained request is taking the Escape Path which should not happen.
We just want to auto approve the defualt roles and other than defualt roles request should take escape path if no approver found.
     2) In other action its quite same as the above one.
     When we are using provisioning type REMOVE for role removal. Request also takes the Escape path as Defualt roles has no approver.
Once the ,Manager at first stage is approved, request should close for the removal type access.
Please advise. Thanks in advance.

In your custom initiator, you need to have mapped out all the scenarios of which path each line item in your request goes to.
The condition columns can be an array of attributes, i.e. Request Type, Role name, Role Connector (System the Role is in), Functional area etc.
In your case, if you want "default roles" auto approved, easiest thing to so is create an empty path (i.e. No stages) and have the initiator set so that if the "Role Name" is "X" (i.e. your default role), go to the path with no stages.
BRF plus Flate Rule - GRC Integration - Governance, Risk and Compliance - SCN Wiki

DEFAULT ROLE FOR USER

I swich to Oracle11g express and create user
CREATE USER LEO
IDENTIFIED BY xy
DEFAULT TABLESPACE USERS
TEMPORARY TABLESPACE TEMP
PROFILE DEFAULT
ACCOUNT UNLOCK;
-- 3 Roles for LEO
GRANT AUTHENTICATEDUSER TO LEO;
GRANT CONNECT TO LEO;
GRANT FER_ADMIN TO LEO WITH ADMIN OPTION;
ALTER USER LEO DEFAULT ROLE FER_ADMIN;
-- 1 System Privilege for LEO
GRANT CREATE SESSION TO LEO;
-- 1 Tablespace Quota for LEO
ALTER USER LEO QUOTA UNLIMITED ON USERS;
and after login i check
select * from SESSION_ROLES
and i have none role
if I set role all works fine.
Why I doesn't have DEFAULT ROLE after login.
Pleas for help .

here is the solution
default roles and grants
Edited by: Leo Lakota on 4.10.2012 5:52

RE: Default role config in CUP

Dear Experts,
I got a problem with default role configuration. Please help me in resolving the issue.
I want to configure defaults for all request types like new account and change account as well. Also I what the option "Create if user does not exist" to YES.
This means when ever change account workflow is executed for the existing users, default roles are getting assigned redundantly. is there any way to fix this problem.
My solution is to schedule "PRGN_COMPRESS_TIMES" job so that system will delete all redundant roles. Please advise if there is any other alternative. Client is insisting to have the option "Create if user does not exist"in Auto provisioning enabled.
I appreciate your help.
Thanks,
Raj

Hi
Set the below parameters it never assign the role for change request.
it is working in our system.
CUP---->Configuration->Roles>Default Roles-->Request type = New Hire

To set a default role according to the user.

Hi,
I would like to set different default roles according to users. For example, we have the following prerequisites:
1) 3 roles: roleA | roleB | roleC (in this order).
2) 3 differents users: user1, user2, user3.
So, if I log-in with the user1, the default role should be the roleA; if I log-in with the user2, the default role should be the roleB; and so on.
But I don't want to change the order of the roles using "sort priority" property.
How can I do this?
Thanks,
Samantha.

Hello Samantha,
Does each of the users need to have each of the roles? If not you could just not assign the other roles except the one you want to display as default role (a assume you mean the role that is displayed first after logon).
If each of your users need every role, I am afraid your requirement is not realizable unless you use the sort priority property. Why don't you want to use it in the first place?
On possible yet circuitous way to meet your requirements would be the following:
Create another role for each of your user(-group)s. Say in your case Role 1, Role 2 and Role 3 which are not defined as entry points.
Assign roleA, roleB and roleC to Role 1 where roleA has the lowest sort priority; and assign user1 to role 1.
Assign roleA, roleB, roleC to Role 2 where roleB has the lowest sort priority; and assign user 2 to Role 2
and so on.
Of course you need to use sort priority for that and I think thats hard to maintain. (probably not even what you are looking for)
Maybe you can get a litle more concrete what you are trying to achieve.
best regards
Stefan

Problem with blob column index created using Oracle Text.

Hi,
I'm running Oracle Database 10g 10.2.0.1.0 standard edition one, on windows server 2003 R2 x64.
I have a table with a blob column which contains pdf document.
Then, I create an index using the following script so that I can do fulltext search using Oracle Text.
CREATE INDEX DMCS.T_DMCS_FILE_DF_FILE_IDX ON DMCS.T_DMCS_FILE
(DF_FILE)
INDEXTYPE IS CTXSYS.CONTEXT
PARAMETERS('DATASTORE CTXSYS.DEFAULT_DATASTORE');
However, the index is not searchable and I check the following tables created by database for my index and found them to be empty as well !!
DR$T_DMCS_FILE_DF_FILE_IDX$I
DR$T_DMCS_FILE_DF_FILE_IDX$K
DR$T_DMCS_FILE_DF_FILE_IDX$N
DR$T_DMCS_FILE_DF_FILE_IDX$R
I wonder what's wrong with it.
My user has been granted the ctx_app role and I have other tables that store plain text which I use Oracle Text are fine. I even output the blob column and save as pdf file and they are fine.
However the database seems like not indexing my blob column although the index can be created without error.
Please advise.
Really appreciate anyone who can help.
Thank you.

The situation is I have already loaded a few pdf document into the table's blob column.
After I create the Oracle text index on this blob column, I find the system generated index tables listed in my earlier posting are empty, except for the 4th table.
Normally we'll see words inside the table where those are the words indexed by oracle text on my document.
As a result, no matter how i search for the index using select statement with contains operator, it will not give me any result.
I feel weird why the blob is not indexed. The content of the blob are actually valid because I tested this by export the content back to pdf and I can still view and search within the pdf.
Regards,
Jap.

Default Date Format in Oracle 9i

What is the default date given by oracle 9i when the column is specified as NULL for the date column ?
Just like in SQL Server 2000 when date is given as NULL, it will give date as
'1900-01-01 00:00:00' in that column. What is it in Oracle 9i
Thanx in advance!

It will be a NULL, unless you specify a DEFAULT for the column:-
<code>
SQL> create table t ( x int, y date );
Table created.
SQL> insert into t ( x ) values ( 1 );
1 row created.
SQL> select * from t;
X Y
1
SQL> alter table t modify ( y date default sysdate );
Table altered.
SQL> insert into t ( x ) values ( 1 );
1 row created.
SQL> select * from t;
X Y
1
1 21-JUL-05
</code>
Regards
Adrian

Roles Creating and assigning to user

Hi all,
Am creating a role as venki & granting some privileges to that role i.e, create session,create table...
Then am creating a user & assigning a role "venki" to the created user.
then after connecting to the user am unable to create a table in that user, am getting privilege problem..
Please give a solution..
Thanks in advance..
Edited by: Venkateshj on Jan 1, 2013 3:32 PM
Edited by: Venkateshj on Jan 1, 2013 4:12 PM

JohnWatson wrote:
The answer you have so far is not necessarily correct. You have granted RESOURCE to the role, and RESOURCE includes an implicit grant of UNLIMITED TABLESPACE. See this:orcl> create role venki;
Role created.
orcl> grant connect,resource,create table to venki;
Grant succeeded.
orcl> create user tpt identified by tpt default tablespace users account unlock;
User created.
orcl> grant venki to tpt;
Grant succeeded.
orcl> conn tpt/tpt
Connected.
Session altered.
orcl> create table app(sname varchar2(9),sid int);
Table created.
orcl>there is no need to grant quota on a tablespace if the user already has RESOURCE, which is one reason why you should never grant RESOURCE to anyone. Clearly, there is sonething else going on in your database. Another indication that things are not as they seem is that in 11.2.x by default you do not need quota on a tablespace (or unlimnited tablespace) to create tables, because by default segment creation is deferred. So you get the error only when you try to insert into the table:orcl> create user me identified by me;
User created.
orcl> grant create session,create table to me;
Grant succeeded.
orcl> conn me/me
Connected.
Session altered.
orcl> create table t1(c1 date) tablespace system;
Table created.
orcl> insert into t1 values(sysdate);
insert into t1 values(sysdate)
ERROR at line 1:
ORA-01950: no privileges on tablespace 'SYSTEM'
orcl>I think you need to investigate further. Things are not as they seem.Ok sir i'l investigate further, but my problem is solved.. By the above content i have to know why the error occurs in 11g..Let me check Once...
Thank u Sir..

Default role created by oracle

Similar Messages

Maybe you are looking for