Granting any privilege system privilege....in Ora10g

Hi,
In order to be given to a user -Info_bi let's name him - the grant to select any table from user Info , This user (Info) must be given the system privilege "any privilege".... So :
connect sys/....@.... as sysdba;
Connected to Oracle Database 10g Enterprise Edition Release 10.2.0.1.0
Connected as SYS
SQL> GRANT ANY PRIVILEGE TO "INFO";
GRANT ANY PRIVILEGE TO "INFO"
ORA-00990:Privilege is missing or invalidWhat error do i do...????
Many thanks...
Sim

There is.......!!!!
Read at :
Oracle® Database SQL Reference
10g Release 2 (10.2)
Part Number B14200-02
The Prerequisites section of the grant command....
I pasted there an extract of it...
To grant a system privilege, you must either have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege. Greetings,
Sim

Similar Messages

Who may grant a system privilege?

I am asking this as the Oracle doc explains:
Only users who have been granted a specific system privilege with the ADMIN OPTION or users with the system privileges GRANT ANY PRIVILEGE or GRANT ANY OBJECT PRIVILEGE can grant or revoke system privileges to other users.
http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96524/c24privs.htm#791
Im not clear on this: why does GRANT ANY OBJECT PRIVILEGE give you the ability to grant SYSTEM privs??
Thanks,
DA

This conflicts with the admin guide (http://download-uk.oracle.com/docs/cd/B10501_01/server.920/a96521/privs.htm#15326) which says: "To grant a system privilege, you must have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege."
It works as said in the admin guide.
SQL> create user test identified by test;
User created.
SQL> grant grant any object privilege to test;
Grant succeeded.
SQL> grant create session to test;
Grant succeeded.
SQL> conn test
Enter password:
Connected.
SQL> grant create any synonym to test2;
grant create any synonym to test2
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> conn sys as sysdba
Enter password:
Connected.
SQL> grant grant any privilege to test;
Grant succeeded.
SQL> conn test
Enter password:
Connected.
SQL> grant create any synonym to test2;
Grant succeeded.
Message was edited by:
Yas

What is the system privilege required to grant "Analytic Privilege" to a user

Hi SCN,
I have the user with following privileges:
SYSTEM Privileges: CATALOG READ,CREATE STRUCTURED PRIVILEGE,DATA ADMIN,STRUCTUREDPRIVILEGE ADMIN,USER ADMIN
PACKAGE Privileges: SECURITY
OBJECT Privileges: _SYS_BI,_SYS_BIC and REPOSITORY_TEST
Am able to create a AP, but not able to assign to a user. Checked different threads and documents, Am able to add with "SYSTEM" user but not with the generic user i have
I can't do tracing as it is disabled in the client system
Am i missing something here? Can someone help me please?
Regards,
Krishna Tangudu

Thank you so much Raj.
I was expecting this kind of privilege under SYSTEM PRIVILEGE.
So other privileges which i mentioned are fine right?
Regards,
Krishna Tangudu

Differences Between Object And System Privileges

Hi,
Whats the difference between object and system privileges in oracle?
Cheers
Paul

System Privileges
A system privilege is the right to perform a particular action, or to perform an action on any schema objects of a particular type. For example, the privileges to create tablespaces and to delete the rows of any table in a database are system privileges.
Schema Object Privileges
A schema object privilege is a privilege or right to perform a particular action on a specific schema object:
For example, the privilege to delete rows from the departments table is an object privilege.
Some schema objects, such as clusters, indexes, triggers, and database links, do not have associated object privileges. Their use is controlled with system privileges. For example, to alter a cluster, a user must own the cluster or have the ALTER ANY CLUSTER system privilege.
A schema object and its synonym are equivalent with respect to privileges. That is, the object privileges granted for a table, view, sequence, procedure, function, or package apply whether referencing the base object by name or using a synonym.
Granting object privileges on a table, view, sequence, procedure, function, or package to a synonym for the object has the same effect as if no synonym were used. When a synonym is dropped, all grants for the underlying schema object remain in effect, even if the privileges were granted by specifying the dropped synonym.

DBA role and system privileges

I created a new user (PIPPO) with the default dba role in my db.
I know that the dba_role has the SELECT ANY TABLE and INSERT ANY TABLE system privileges.
I expeperienced that if I select a table of another schema on a simple sqlplus session everything is OK, but if I select the same table on the same manner in a PL/SQL procedure or in the creation of a wiew, both owned by PIPPO, the error message is that the table not exists...
So I have to grant SELECT and INSERT on the tables I want to my user PIPPO.
Does anyone tell me if this is normal or strange?
Thanks

This is normal. To access other schema's table you need to have direct grant not through roles. DBA is a role.

Granting system privileges DEBUG ANY PROCEDURE and CONNECT SESSION in 10gXE

I am using Oracle DB 10g Express Edition and trying out SQL Developer. Whenever I want to debug a procedure I got the error:
This session requires DEBUG CONNECT SESSION and DEBUG ANY PROCEDURE user privileges.
But I don't see these privileges to grant in the XE GUI for users.
Does anybody know if this is supported in XE.
Thanks.

Hi
Use SQL*Plus (or the apex interface), logon as dba and type this sql statements:
grant DEBUG CONNECT SESSION to <username>;
grant CONNECT SESSION to <username>;

How to check whether system privilege are granted

How to check whether system privileges like 'create session' and other ones are granted for user.
Is there any sys table where this information is available?
Regards - Neuron

Keep in mind select * from dba_sys_privs where grantee = 'some-user' will give you a list of privileges granted to some-user directly. To get complete list of system privs granted to a user both directly an via roles use:
ACCEPT USER PROMPT 'Please enter user name: '
COLUMN PATH FORMAT A90
SET LINESIZE 132
SELECT PATH,
        PRIVILEGE
FROM DBA_SYS_PRIVS,
          SELECT 'DIRECT GRANT' PATH,
                  '&USER' GRANTED_ROLE
            FROM DUAL
         UNION ALL
          SELECT LTRIM(SYS_CONNECT_BY_PATH(GRANTED_ROLE,'->'),'->') PATH,
                  GRANTED_ROLE
            FROM DBA_ROLE_PRIVS
            START WITH GRANTEE = UPPER('&USER')
            CONNECT BY PRIOR GRANTED_ROLE = GRANTEE
WHERE GRANTEE = GRANTED_ROLE
/Now on top of privileges granted to a user, user also has privileges granted to PUBLIC. To get privileges user receives via PUBLIC run the above script specifying PUBLIC at the prompt.
SY.

Grant any privilege, privilege

About 4 weeks ago i got some much appreciated assistance in setting up my environment so that a user could grant object privileges on objects in another user's schema. This solution required a function to be built in the schema which owned objects.
I just found the 'GRANT ANY PRIVILEGE' privilege. Anyone know when this came about (we're using 10g) and if there's any problem to granting this?
We have the init param 07_DICTIONARY_ACCESSIBILITY set to False. Will we be able to keep people of the SYS schema?
-cf

Let me specify, I was referring to the GRANT ANY OBJECT PRIVILEGE above, although I do see the GRANT ANY PRIVILEGE out there as well.
-cf

Granting ALTER SYSTEM privilege to Application user

DB version:10gR2
When we purchased a logistics application software, we have been asked to grant alter system privileges to the Application Oracle user/schema by the application vendor. They said they need this to change Instance level parameters like OPTIMIZER_MODE,..etc. What do you guys think?
Edited by: GarryB on Feb 17, 2009 10:25 PM

GarryB,
This is a strange idea. Many parameters can be altered on session level.
If they want to change static parameters, do they also require the privilege to bounce the instance?
Even if the application would need to change parameters, this should be encapsulated in a procedure created in a privileged user, with execute privilege granted to the application owner.
If feel you will regret to have purchased this application sooner or later, the vendor doesn't seem to know much about Oracle.
Hth
Sybrand Bakker
Senior Oracle DBA

Create a new user for oracle 10G ASM instance with sysdba system privilege

Hi,
In our Golden Gate Project, we require the SYS user credential to connect to the Oracle 10g ASM instance to read the database transaction logs.But our client is not providing the SYS user credential to connnect to ASM instance.
I'm getting the error message "ORA-01109: database not open",When I tried to create a new user using the below the steps in oracle 10g ASM instance
1. Login using "sqlplus / as sysdba"
2. Create user <username> identified by <password>;
But in oracle 11g ASM instance, I'm able to create new user by connecting the ASM instance with SYSASM role without issues.
Is there is any workaround to create a new user with sysdba system privilege in oracle 10g ASM instance?.
Thanks in advance .

Hi,
Recreate the password file for the ASM instance as follows:
Unix:
orapwd file=<ORACLE_HOME>/dbs/PWD<SID> password=<sys_password>
Windows:
orapwd file=<ORACLE_HOME>/database/PWD<SID>.ora password=<sys_password>
Now sys password is reset, we are ready to use sys for ASM management. I decided to create another user ASMDBA as I tried above.
SQL> create user ASMDBA identified by test01;
User created.
SQL> grant SYSASM, SYSOPER to ASMDBA;
Grant succeeded.
SQL> select * from v$pwfile_users;
USERNAME SYSDBA SYSOPE SYSASM
SYS TRUE TRUE TRUE
ASMDBA FALSE TRUE TRUE
Please see this link : http://orachat.com/how-to-change-asm-sys-password-creating-sysasm-user-11g/
Thank you

VLD-2771 System privileges may not allow extraction from source ....??

When I try to deploy the mappings in OWB Deployment Manager, I got a Warning "VLD-2771 System privileges may not allow extraction from source ORDER_ITEMS". WHY? ^^""
========================================
I define a Runtime Repository Connections "ORACLE_HW_RUNTIME"
Host Name: localhost
Port Number: 1521
Service Name: GBGLM
Connect As User: owb904rr
Runtime Repository Owner: owb904rr
and the "ORACLE_HW_RUNTIME" is in "ORACLE_WAREHOUSE" module, the "ORACLE_WAREHOUSE" use the link "OE" and the owner is "OWBUSER"
p.s. the table "ORDER_ITEMS" is in "OE" schema. I had grant DBA to "owb904rr" and "OWBUSER".
then use "ORACLE_HW_RUNTIME" to deploy the Mappings "WH_ORDERS_MAP". What I need to do for deploy?
^_^||

Anyone with similar experience using SQL Server as the source?
First I get: VLD-2771: System privileges may not allow extraction from source Product.
Then if i ignore the warning and deploy, i get
ORA-06550: line 15, column 18:
PL/SQL: ORA-00942: table or view does not exist
I have a public database link to the sql server database.
When I create the mapping, I am able to see the tables and create the map. So why this problem when deploying. Which user is to be granted access to the source tables. I belive we cannot grant access to remote database tables using a database link. So what is the work around?
Any help is highly appreciated.
Please email me at [email protected]

*Listing admin_option for System Privilege *

Hi All,
I have a use case where in i have to list the admin_option for all the system privileges.
Apart from two privileges listed below i could find this info from dba_sys_priv and dba_wm_sys_priv views.
SYSDBA
SYSOPER
We can find these privileges information from v$pwfile view which do not give any information abt admin_option.
Is there any way we can find out this inforamtion?
I executed following steps :
=================================
SQL> conn user2/password
Connected.
SQL>select user from dual;
USER
USER2
SQL> conn user2/password as sysdba
Connected.
SQL> select user from dual;
USER
SYS
SQL> conn user2/password
Connected.
SQL> grant sysdba to user1;
grant sysdba to user1
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> conn user2/password as sysdba
Connected.
SQL> run
1* grant sysdba to user1
Grant succeeded.
======================================
Here when 'user2' is connecting as sysdba, its becoming 'sys' and its 'sys' who is granting sysdba privilege to 'user1'.
So from this, can we say that its always 'sys' who can grant the sysdba privilege and admin_option for sys is always 'YES' where as for other users its always 'NO'
Is this same for 'sysoper' privilege, because initially, its only 'sys' who has both the privileges assigned?
If above is not true, is there any way to find this information?
I am in URGENT need of this information. Could anybody please help me on this?

Just a correction...
From Oracle management Console, we can not change the admin_option assigned by default.
Even if we try to change, the following sql gets executed
REVOKE SYSDBA FROM USER2
GRANT SYSDBA TO USER2
So its ultimately With admin option always :)
That has solved my problem
Thanks all for your help..
--Mrunal

ALLOW A USER TO KILL A SESSION WITHOUT ALTER SYSTEM PRIVILEGE.

Hi
I need a user to have permission to kill a session without having the ALTER SYSTEM privilege. I created a procedure on sys schema and granted the EXECUTE privilege to the user but it doesn't work, how can I do, help please.
CREATE OR REPLACE PROCEDURE SYS.PRC_SESSION_KILLER (P_SID IN NUMBER, P_SERIAL IN NUMBER)
AS
BEGIN
     EXECUTE IMMEDIATE 'GRANT ALTER SYSTEM TO SYSADMIN';
     EXECUTE IMMEDIATE 'ALTER SYSTEM KILL SESSION ''' || P_SID || ',' || P_SERIAL || ''' IMMEDIATE';
     EXECUTE IMMEDIATE 'REVOKE ALTER SYSTEM FROM SYSADMIN';
END;
Thank you very much.

Hi,
I second everything John said.
Are you sure the arguments are correct?
Below is the procedure I use. You may want to run it, just to see what the error is.
PROCEDURE     kill_internal
     s_id          IN     NUMBER,
     serial_num     IN     NUMBER,
     stat_out     OUT     VARCHAR2
IS
     alter_handle     INTEGER;
     ex_val          INTEGER;     -- Returned by dbms_sql.execute
BEGIN
     alter_handle := dbms_sql.open_cursor;
     dbms_sql.parse
          alter_handle,
          'ALTER SYSTEM     KILL SESSION '''     ||
               TO_CHAR (s_id, '999990')     ||
               ', '                    ||
               TO_CHAR (serial_num, '999990')     ||
          dbms_sql.native
     ex_val := dbms_sql.execute (alter_handle);
     dbms_sql.close_cursor (alter_handle);
     stat_out := 'Success: '                    ||
               TO_CHAR (s_id, '999990')     ||
               ', '                    ||
               TO_CHAR (serial_num, '999990');
EXCEPTION
     WHEN OTHERS
     THEN
          stat_out := 'Failure:'          ||
               SQLERRM;
--          dbms_output.put_line (stat_out);
          dbms_sql.close_cursor (alter_handle);
END     kill_internal
;

System.privilege.admin problem

Good afternoon. Please excuse if this has already been asked and answered, but after searching for a few days I still haven't found a fix for this:
After I had to wipe the hard drive on my G5 (don't ask), I reinstalled the OS from the DVD and then used the setup assistant to migrate all my files from my (mirrored) MacBook Pro. Now the application that runs my wireless broadband modem starts up, recognizes the modem, which is getting reception and shows up on Sprint's network (their tech support confirms), but *asks for my admin password, noting that it's necessary for "system.privilege.admin"* I give the (confirmed) password. At that point I get the spinning beach ball for a few seconds, then nothing at all happens. It doesn't freeze, mind you. It just goes back to idle. The same modem works fine with the same software on my laptop.
*How do I fix my "system.privilege.admin"?*
I had to reauthorize my Adobe Creative Suite, too, incidentally, but that took immediately.
Here's what I've already tried:
--Repair permissions
--Un- and reinstall the software
--delete plists associated with Sprint's SmartView software
--create a new user account with admin privileges (beyond my main account that has admin privileges, too, of course)
--confirmed firewall settings as "allow all incoming connections"
None of these had any effect on the problem.
Thank you for your time. I hope you can help.

Ah! Very interesting! I hadn't thought to circumvent the provided application entirely. -- Well, look at that! That did the trick! Thank you, Sig.
Here is the configuration for future reference:
Configuration: Default
Telephone Number: #777
Account name: (field left blank)
Password: (field left blank)
Advanced > Modem Tab:
Vendor: Other
Model: EVDO Support
Enable error correction and compression in modem (checked)
Dial Mode: Ignore dial tone when dialing
Dialing: Tone
Sound: Off
The rest of the settings I left alone.
I'm still curious how to address the system.privilege.admin issue, but my actual problem is solved. Thank you for your help! I appreciate it.

System privileges do not enable extraction from source

Hi
I'm new to OWB, Also for this I granted select on source to target.
I'm using OWB10g/Oracle on Windows xp on same m/c(Local Host), I created mapping source tables emp/dept (look up on dept) and taget to dept_emp.
When I valaidate gives validation compled successfully, When I go to deployment manager, It gives System privileges (I granted select privilges using SQLPLUS), When I tried to deploy it gives another error Runtime owned by different platform.
What is the error, Pl help.
Many thanks in advance
Murthy

I fixed the problem

Granting any privilege system privilege....in Ora10g

Similar Messages

Maybe you are looking for