How does one get "full" privilege to allow management?

Question

Configuration:
Database(s)
8.0.5 on Sun Solaris 5.5
8.1.7.4 on Sun Solaris 5.8
9.0.1.3 on Sun Solaris 5.8 (where my OEM repository resides)
Oracle Enterprise manager
9.0.1.0.0 (Client on Windows 2000)
When I connect to a database as SYS AS SYSDBA and try to manage things like users, I often get a message like:
ORA-01927 cannot REVOKE privileges you did not grant
or creating a user like gives
ORA-01031: insufficient privileges
You do not have enough privileges to perform this
operation. You must have the appropriate system and
object privileges to create, edit, or drop database objects
or objects outside of your schema
Although this is probably not an OEM issue, Im hoping you can point me in the right direction. How can I manage when Im logged in as SYS SYSDBA if that does not provide enough privilege?

Answer 1

I misunderstood. You were actually trying to connect as sys as sysdba.
You are quite right as sys there should be nothing stopping you.
Since you were not able to create a user and as sys you should have been able to do it,
this begs the question: how are you connecting?
If you are on the oracle server, try this:
Login as oracle (or su - oracle)
sqlplus /nolog
connect internal as sysdba; (internal is an alias for sys)
create user XXXXXX default tablespace users temporary tablespace temp identified by XXXXXX;
That should work, then you should be also able to connect directly as sys:
connect sys/******[@service] as sysdba;
create user XXXXXX default tablespace users temporary tablespace temp identified by XXXXXX;
Hopefully, that is a bit more helpful.
William
I did not clearly state what I am doing. I am performing (attempting to) all operations in the OEM GUI. I am connected as "SYS as SYSDBA".
The "Create Like" operation is performed by right mouse clicking (Windows OEM) on an existing user that have some grants already applied to them.
The Revoke operation is performed by selecting (double clicking) a user in the "Security/Users" folder, going to the "Object Privileges" tab "removing" a grant and then trying to "Apply" that removal. I could perform multiple operation (Add or Remove) to a user and then do a single "Apply"
William, thanks for the information that you have provided. It appears that the "as sys there should be nothing stopping you" feature (which is what I want) actually exists in these cases.