*Listing admin_option for System Privilege *

Hi All,
I have a use case where in i have to list the admin_option for all the system privileges.
Apart from two privileges listed below i could find this info from dba_sys_priv and dba_wm_sys_priv views.
SYSDBA
SYSOPER
We can find these privileges information from v$pwfile view which do not give any information abt admin_option.
Is there any way we can find out this inforamtion?
I executed following steps :
=================================
SQL> conn user2/password
Connected.
SQL>select user from dual;
USER
USER2
SQL> conn user2/password as sysdba
Connected.
SQL> select user from dual;
USER
SYS
SQL> conn user2/password
Connected.
SQL> grant sysdba to user1;
grant sysdba to user1
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> conn user2/password as sysdba
Connected.
SQL> run
1* grant sysdba to user1
Grant succeeded.
======================================
Here when 'user2' is connecting as sysdba, its becoming 'sys' and its 'sys' who is granting sysdba privilege to 'user1'.
So from this, can we say that its always 'sys' who can grant the sysdba privilege and admin_option for sys is always 'YES' where as for other users its always 'NO'
Is this same for 'sysoper' privilege, because initially, its only 'sys' who has both the privileges assigned?
If above is not true, is there any way to find this information?
I am in URGENT need of this information. Could anybody please help me on this?

Just a correction...
From Oracle management Console, we can not change the admin_option assigned by default.
Even if we try to change, the following sql gets executed
REVOKE SYSDBA FROM USER2
GRANT SYSDBA TO USER2
So its ultimately With admin option always :)
That has solved my problem
Thanks all for your help..
--Mrunal                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

Similar Messages

  • Sql for system privileges

    What is the sql command to view all the system privileges that are available. Thanks have been searching on the web with no luck.
    found it system_privilege_map
    Message was edited by:
    user457357

    And just to show the difference between what the OP found and what Virag suggested:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> select name from system_privilege_map
    2 minus
    3 select privilege from dba_sys_privs;
    NAME
    EXEMPT ACCESS POLICY
    EXEMPT IDENTITY POLICY
    SYSDBA
    SYSOPER

  • System.privilege.admin problem

    Good afternoon. Please excuse if this has already been asked and answered, but after searching for a few days I still haven't found a fix for this:
    After I had to wipe the hard drive on my G5 (don't ask), I reinstalled the OS from the DVD and then used the setup assistant to migrate all my files from my (mirrored) MacBook Pro. Now the application that runs my wireless broadband modem starts up, recognizes the modem, which is getting reception and shows up on Sprint's network (their tech support confirms), but *asks for my admin password, noting that it's necessary for "system.privilege.admin"* I give the (confirmed) password. At that point I get the spinning beach ball for a few seconds, then nothing at all happens. It doesn't freeze, mind you. It just goes back to idle. The same modem works fine with the same software on my laptop.
    *How do I fix my "system.privilege.admin"?*
    I had to reauthorize my Adobe Creative Suite, too, incidentally, but that took immediately.
    Here's what I've already tried:
    --Repair permissions
    --Un- and reinstall the software
    --delete plists associated with Sprint's SmartView software
    --create a new user account with admin privileges (beyond my main account that has admin privileges, too, of course)
    --confirmed firewall settings as "allow all incoming connections"
    None of these had any effect on the problem.
    Thank you for your time. I hope you can help.

    Ah! Very interesting! I hadn't thought to circumvent the provided application entirely. -- Well, look at that! That did the trick! Thank you, Sig.
    Here is the configuration for future reference:
    Configuration: Default
    Telephone Number: #777
    Account name: (field left blank)
    Password: (field left blank)
    Advanced > Modem Tab:
    Vendor: Other
    Model: EVDO Support
    Enable error correction and compression in modem (checked)
    Dial Mode: Ignore dial tone when dialing
    Dialing: Tone
    Sound: Off
    The rest of the settings I left alone.
    I'm still curious how to address the system.privilege.admin issue, but my actual problem is solved. Thank you for your help! I appreciate it.

  • Event tasks in SYSTEM Privilege ?

    Hello Experts,
    SAP IDM 7.2 SP8.
    I have query on event task being defined on SYSTEM PRIVILEGE (PRIV:SYSTEM:<REPO_NAME>).
    I believe IDM should not trigger provisioning tasks(ex. HOOK TASK 4) due to removal or addition of SYSTEM privilege.
    Only removal/addition of ACCOUNT PRIVILEGE (PRIV:<REPO_NAME>:ONLY) should
    trigger of provisioning tasks which also remove/add of system privilege for the user as defined in provisioning framework.
    So, How Event tasks should be defined for system privileges ?
    I think it should be empty (NONE).
    Below screenshots shows the current configuration being done for system privileges in my client's IDM system.
    This results in trigger of HOOK TASK 4 when SYSTEM privilege is removed/added from the user which causes errors which I know happen because of defining event tasks on SYSTEM PRIVILEGES.
    Your help is appreciated.
    Thanks & Regards,
    Pradeep

    Hi Steffi,
    Thank you very much.
    I just  compared Task defined at Repo level and privilege level and could relate then.
    Add Task (Assignment at Repo level, screenshot 1) =  Add Task (Assignment at Privilege level, screenshot 3)
    Remove Task (Assignment at Repo level, screenshot 1) =  Remove Task (Deassignment at Privilege level, screenshot 3)
    Provisioning task (Privilege tasks at Repo level, screenshot 1) = Provisioning task (Privilege tasks at Privilege level, screenshot 2)
    Deprovisioning task (Privilege tasks at Repo level, screenshot 1) = Deprovisioning task (Privilege tasks at Privilege level, screenshot 2)
    So I need to set Add Task (Assignment at Privilege level, screenshot 3) and Remove Task (Deassignment at Privilege level, screenshot 3)  to NONE .
    In your case, this is the setting done and so provisioning does not trigger due to addition/removal SYSTEM privilege which is correct.
    I would do this change in Dev system and test it .
    I will update the thread with result.
    Event task defined at repo level.
    Screenshot 1:
    Task defined at privilege level (tab Tasks)
    Screenshot 2:
    Event task defined at privilege level.
    Screenshot 3:
    Thanks & Regards,
    Pradeep

  • Create a new user for oracle 10G ASM instance with sysdba system privilege

    Hi,
    In our Golden Gate Project, we require the SYS user credential to connect to the Oracle 10g  ASM instance to read the database transaction logs.But our client is not providing the SYS user credential to  connnect to ASM instance.
    I'm getting the error message "ORA-01109:  database not open",When I tried to create a new user using the  below the steps in oracle 10g ASM instance
    1. Login using "sqlplus / as sysdba"
    2. Create user <username> identified by <password>;
    But in oracle 11g ASM instance, I'm able to create new  user  by connecting the ASM instance with SYSASM role without issues.
    Is there is any workaround to create a new user with sysdba system privilege in oracle 10g ASM instance?.
    Thanks in advance .

    Hi,
    Recreate the password file for the ASM instance as follows:
    Unix:
    orapwd file=<ORACLE_HOME>/dbs/PWD<SID> password=<sys_password>
    Windows:
    orapwd file=<ORACLE_HOME>/database/PWD<SID>.ora password=<sys_password>
    Now sys password is reset, we are ready to use sys for ASM management. I decided to create another user ASMDBA as I tried above.
    SQL> create user ASMDBA identified by test01;
    User created.
    SQL> grant SYSASM, SYSOPER to ASMDBA;
    Grant succeeded.
    SQL> select * from v$pwfile_users;
    USERNAME SYSDBA SYSOPE SYSASM
    SYS TRUE TRUE TRUE
    ASMDBA FALSE TRUE TRUE
    Please see this link : http://orachat.com/how-to-change-asm-sys-password-creating-sysasm-user-11g/
    Thank you

  • Missing SYSDBA & SYSOPER System Privileges in EM checkbox lists

    I created a brand new user called USER1.
    When edit the USER1 using Eneterprise Manager, System Privileges, both the SYSDBA and SYSOPER are missing from the system privileges check box listing.
    Why it is like that?
    I am using Oracle 10g R2 and HPUX.
    Thank you,
    Smith

    It seems that the user you have used to login to EM doesn't have permissions to grant sysdba, sysoper privileges, please connect to em AS sysdba
    Oded
    [www.dbsnaps.com]
    [www.orbiumsoftware.com]

  • Setting user parameter for system - save - list - options

    i want to set the user parameter for system > save > list > options so user dont need to select every time for any option.
    Moderator message - Title modified because the page renderer can't handle ">".
    Edited by: Rob Burbank on Nov 10, 2009 9:15 AM

    Not Answerd

  • How to check whether system privilege are granted

    How to check whether system privileges like 'create session' and other ones are granted for user.
    Is there any sys table where this information is available?
    Regards - Neuron

    Keep in mind select * from dba_sys_privs where grantee = 'some-user' will give you a list of privileges granted to some-user directly. To get complete list of system privs granted to a user both directly an via roles use:
    ACCEPT USER PROMPT 'Please enter user name: '
    COLUMN PATH FORMAT A90
    SET LINESIZE 132
    SELECT  PATH,
            PRIVILEGE
      FROM  DBA_SYS_PRIVS,
              SELECT  'DIRECT GRANT' PATH,
                      '&USER' GRANTED_ROLE
                FROM  DUAL
             UNION ALL
              SELECT  LTRIM(SYS_CONNECT_BY_PATH(GRANTED_ROLE,'->'),'->') PATH,
                      GRANTED_ROLE
                FROM  DBA_ROLE_PRIVS
                START WITH GRANTEE = UPPER('&USER')
                CONNECT BY PRIOR GRANTED_ROLE = GRANTEE
      WHERE GRANTEE = GRANTED_ROLE
    /Now on top of privileges granted to a user, user also has privileges granted to PUBLIC. To get privileges user receives via PUBLIC run the above script specifying PUBLIC at the prompt.
    SY.

  • HT1477 I am trying to install a new iPod Shuffle and my pc does not pick it up.  My pc is running windows 8.1 os.  I do not see that os in the list of operating systems.

    I am trying to install a new iPod Shuffle and my pc does not pick it up.
    My operating system is Windows 8.1 and windows 8 does not appear
    in the list of operating systems.

    You are referring to OFFICE 2010, not Windows XP or 7.
    And which version of Windows do you have?
    NEVER begin before you have a backup, ideally one you have tested and know works.
    You don't really install Boot Camp, the Assistant is a partition tool utility.
    You may just want Office 2008 for Mac.
    If you need Office for Windows, perhaps run Windows in a VM like Parallels or Fusion.
    Buy some backup drives and start using TimeMachine for one backup, then weekly backup with SuperDuper.
    IF there is now a partition for Windows, all you need is to buy Windows, and I would recommend Windows 7 Home Premium (retail) which is about US$149.
    Has nothing to do with free space. Office 2010 isn't to boot from. In fact, you can copy the disc to a folder (1.25GB) and run SETUP from there.

  • [Feature Request] Seperate tab in log window for System.err

    By default, the stack traces of exceptions (and throwables in general) are printed to the System.err stream. So, wouldn't it be useful to include a 2nd tab for System.err messages?
    It could be optional to either include or leave out the System.err output in the System.out tab.
    The whole idea of this 2nd tab is to set it up like the search output tab: a tree-like list which can be expanded to see the stack trace of each exception that occured during runtime. A small parser can parse the stack trace when an exception is printed on the System.err stream and format it.
    If this option would be availble in the debugger only, that would be ok too, I guess. Although, the debugger already has some other means of jumping through code when an exception is thrown (ie, when the debugger 'pauses' runtime).

    I've logged an Enhancement request to improve the handling of System.err messages (2811508). There are ways to enhance the treatment of System.err messages without introducing a new tab, through the use of color, links back to the source code, and collapsing of entire stack traces to a single line (with a button to see the entire trace).
    Thanks!
    -- Brian

  • There is no iView available for system "SAP_ERP_Manufacturing"...

    Hi out there,
    I have imported the business packages Common Parts 1.2 and Maintenance Technician 1.2 in our portal testsystem (nw7, sps18). after setting up a system with alias SAP_ECC_MANUFACTURING and asigning the role com.sap.pct.erp.maintech.maintenance_technician to my super admin user I can browse through the navigation of this role and all the iviews do what they are supposed to to (e.g. I can call the "Technical Structure View" and create a notification for an object out of the list)...
    When assigning the role com.sap.pct.erp.maintech.maintenance_technician to a test user (with the roles and groups from a simple enduser), I get the following error when trying to create anotification (or doing anything else in the technical structure view): There is no iView available for system "SAP_ERP_Manufacturing": object "notification".
    I have checked the permissions in all relevant areas of the PCD. Everywhere there are at least read permissions for everyone. Also I have copied the iView com.sap.pct.erp.common.notification_create to another place in the PCD and added it to the operation "create" of the Business Object "SAP_ERP_Manufacturing.notification" (with the highest priority). But that didn't change anything...
    Well, I don't know what else I could do to find out what's wrong. I just hope anyone out there can help me out... )
    Best Regards
    Juergen Kuechle.

    Hi Thulasi,
    sorry, but that's not the point. The system with alias "SAP_ECC_MANUFACTURING" is used to call the WD application in the R/3 backend system (which works out pretty fine). The WD application then calls back the portal using the object based navigation technology (OBN). In this case it calls the object SAP_ERP_Manufacturing.notification and tries to execute the iview linked to the action "create" of the object.
    And here exactly is the problem that I'm facing. With the super admin user OBN works fine, with an enduser the OBN fails...
    Regards, Juergen.

  • Multiple Hard Drives: one for system & applications, one for backup

    I am planning the upgrade of my hard drive setup. Presently, I have only the original 74.53 GB internal drive that came with my June 2004 G5 1.8 dual CPU. I have two goals for the upgrade. First, more hard drive space. Second, a drive for automatic backup. Since I am running OS 10.4.11 and not intending to upgrade to 10.5 at this time for application reasons, I will be using something like Carbon Copy Clone for the backup software (not Time Machine, which requires OS 10.5). My thinking, so far, is to install a 1 TB internal drive for system and another internal or external 1 TB drive for the backup. In perusing the discussions here, it looks like an external drive is always used for the backup. Is this true or would an internal drive work just as well for backup? I want the backup to be as free as possible from any corruption or problems that might arise on the system drive or other computer parts. Does the Firewire or USB connection of an external drive offer a greater amount of freedom from potential corruption as opposed to the direct SATA connection of an internal drive?
    I realize that burnt DVD’s offer the greatest amount of freedom from corruption but one doesn’t burn a DVD hourly, daily, weekly or so on. Hopefully, if a problem arises my work underway is residing on the backup drive unaffected. I’m not sure how close in time this can be. I imagine this probably depends on the backup software used and how often the backup is run. I’m not yet fully aware of the options.
    For the internal system drive is there any good reason to partition it? I f so, why, and in what way? Do the OS and applications need to reside on the same partition? If not (or better that they don’t), how should a 1 TB drive be partitioned?
    Thanks in advance for any suggestions on the best configuration of my hard drive upgrade.

    1) The backup drive is best to be external (security from computer failure).
    Yes. I am not sure about the "in some ways" my esteemed colleague qualifies.
    2) The external backup drive should be connected by Firewire (ability to be bootable & greater speed).
    Yes. Just beware that some of the Western Digital models have presented problems. Not the drives themselves but the enclosures. [List of Western Digital bootable and non bootable models|http://discussions.apple.com/message.jspa?messageID=9022456#9022456]
    Is a Firewire connected drive any less vulnerable to damage by computer hardware failure than an internal drive?
    Yes & no. The yes: I don't know about G5s (they use a different connector from the G4s and earlier with which I am familiar) but in some computers the drives will share the same controller. If the controller goes then all connected drives can be corrupted. The no: Then too, I have had two Firewire drives be corrupted. One was by trying it with a PCI card (not what you're using) that was incompatible with my model computer. The other was when the power source in the enclosure went bad.
    This is almost leading me to think that 3 drives would be the best! One internal for OS system & applications (1 TB), one continually connected for auto backup (my original 74 GB), and one (a bootable clone) attached only during occasional backups (2 TB).
    The more the better. I usually buy drives in size increments that make sense for my configuration. I have two 120GB internal drives so I bought a 250GB external drive for backup and partitioned it into two so I could just back up one internal to one partition and the second to the other.
    I'm perplexed with both your feelings about burnt media. I was not aware of this and fortunately have not experienced problems. However, it is only recently that I gravitated from 700MB CD's to 4.7 GB DVD-RW's for backups. I've been using Maxell
    There's backup and there's archiving. Backup is for having a copy of what you're actively using. Archiving is storing stuff that is unlikely to change. Optical media is lousy for backup because files are constantly changing. Backing up a 120 GB onto 4GB media either requires a super organized person or you're spending a day sticking DVDs into your computer.
    Optical media is less lousy for archiving, but still not great. Where's the floppy drive on your computer? Where will the DVD drive be in 15 years? It's also a lot faster archiving onto hard drives, and the cost of drives has come down to where the per GB cost is about equivalent of less than high-quality, archival-grade DVDs. Yes, drives change too, but it is also easy to copy from drive to drive. I have items archived on drives that are over 10 years old and as long as I make sure I keep on top of being able to connect those drives to a computer they are usable.
    BTW: I tried to quote your messages for this reply, went to "Help" to learn how that is done and found this: "If you want to quote specific text from the original message, click Quote Original to add all the text from the original message to the Message box." I could see no such button "Quote Original". Can anyone please tell me where it is?
    There's a '"' icon in the compose window when you type a reply. If I'm doing a lot of quotes (as I did here) I use that, then edit out the bits I don't want. Otherwise I copy and paste the text and add a > before the line to get it to appear in the special format.

  • No Service for System SAPECC(Sender Port), Client800(R/3 system client 800)

    Hi friends,
    I am new to XI/PI I am working with IDOC to Flat file scenario I am facing the folllowing error.
    No Service for System SAPECC(Sender Port), Client800(R/3 system client 800) in integration Directory.
    can any one tell what was the reason for this error.
    Thanks in Advance,
    Ravi Yasoda.

    Hi Ravi,
    Have you imported the Business System in Integration Directory?
    Check whether  you see the logical system name in adapter specific identifiers or not...
    Also check from integration directory that cache notification was done and also check SXI_CACHE in the abap stack.
    See this thread...
    No service for system SAP***, client 001 in Integration Directory
    Please go through below content from sap note  for your issue...
    Error message: No service for system SAPABC client 123 in the integration directory
    Solution:
    You send IDocs from system ABC to XI. In the control record of the IDoc,the SNDPOR field contains the value "SAPABC". The client of the sending system is determined by the MANDT field of the control record. The system ID and client are then used to determine a service without party of the
    type (business-system/business-service):
    Business system
    -> Activities in the System Landscape Directory (SLD)(Create technical
    system):
    Create a technical system for system ABC in the SLD, and create the client for this. Do not forget to assign an "ALE logical system" (for example, "ABCCLNT123") to this technical system.
    SLD (Business system):
    You can now explicitly assign a business system to this client. For more details, refer to the SLD documentation.
    Activities in system ABC (self-registration in the SLD):
    Alternatively, you can register the system in the SLD in system ABC with Transaction RZ70. You will find detailed information about the SLD registration of systems on the SAP Service Marketplace for the
    "Exchange Infrastructure" in the document "Exchange_Installation_Guide.pdf".
    In system ABC, you can check your configuration with Transaction SLDCHECK.
    Activities in Integration Directory (import business system from SLD):
    You will find the business systems under Services Without Party in the Integration Services. In the Service menu, you will find the system identifiers, the client, and the corresponding ALE logical
    system under "Objects"->"Adapter-specific identifiers". Use the Import/Update button to copy the data from the SLD, to create business systems, or to update their identifiers.
    Business service
    -> Activities in the Integration Builder directory:
    You want to create a service without party that is not part of your system infrastructure and is therefore not maintained in the SLD. In the Integration Builder directory, you will find the "Business-Services" under Services Without Party. In the Service menu, you will find the system identifiers, the client, and the corresponding ALE logical system under "Objects"->"Adapter-specific
    identifiers".
    Activate the change list in Integration Directory.
    In system ABC, you can restart the incorrect entry from Transaction SM58 .
    Regds,
    Pinangshuk.

  • In J1IFR-List subcontracting challans, system showing Zero Quantity pending although Qty is pending

    In J1IFR-List subcontracting challans, system showing Zero Quantity pending although Qty is pending at MASOP vendor. After reconciliation of challan, the Qty sent=250 , Qty received= 113. system must show Qty pending = 137. But when we check in J1IF12, Qty sent=250 and Qty received=113. Why J1IFR report is showing incorrect output.
    I am facing this problem after Ehp7 upgrade in SAP ECC 6.0 version.
    Thanks & Regards,
    Neeraj.

    Are you using the same number ranges for different series group. This can cause inconsistency. Also check table J_1IGRXSUB whether right material documents are attached to your Challan.
    Also refer to these notes which is only applicable for EHP6.
    1753000 - Wrong output displayed for status in report selection-
    J1IFR
    and
    1674607 - Duplicate entries while displaying Annexure IV in
    J1IFR
    Regards
    Binoy

  • A custom task sequence to install software is always listed as Operating System on Software Center

    Hello,
    I have built several custom task sequences to install software in SCCM 2012 R2 CU1 environment, but the type of task sequence is always listed as Operating System on the Software Center. I tried creating a simple task sequence (Task Sequence 1) that contains
    a single restart computer step only and tried deploying it to a test machine. This task sequence is also listed as Operating System. This task sequence fails because this is not the one for OS install and I do not specify a boot image for this task sequence.
    All task sequences that I have created in SCCM 2012 RTM environment are working as expected. All task sequences that I create in SCCM 2012 R2 CU1 are listed as Operating System regardless of its actual type (I upgraded my environment from CM2012 RTM to CM2012
    R2 CU1 last month).
    Here is a test task sequence that contains a single step of restart computer. This is not Operating System install but listed as Operating System. Any thoughts?

    If you use OSD steps in your task sequence you will get this prompt.
    http://social.technet.microsoft.com/Forums/en-US/3eb7569c-0b5a-4b40-86c3-d4f092c70aca/task-sequence-warning?forum=configmanagerosd
    Per Mikko:
    Using any of following steps (and possibly others as well, I did not check all of them) will change the task sequence type from generic to OSD:
    General - Join Domain or Workgroup
    General - Restart Computer (Only "The boot image assigned to this task sequence" option)
    Disks - Format and Partition Disk
    User State - Request State Store
    User State - Release State Store
    Images - Apply Operating System Image
    Images - Setup Windows and ConfigMgr
    Daniel Ratliff | http://www.PotentEngineer.com

Maybe you are looking for