Table privileges granted to roles [ROLE_TAB_PRIVS]

Hello,
i am trying to fetch all roles, table_name and privilege using table ROLE_TAB_PRIVS.
BI went to check which roles are displayed in that table and it says:
Information is provided only about roles to which the user has access.
Here is my problem ... i can not find some of the roles that are 100% created ... i have tried even with sys user but still no success.
Is there a way to query all roles created in DB with table_names & privileges?
Thank you in advance!

Hello,
i can see roles i am looking for in :
SELECT
FROM dba_tab_privs;
SELECT
FROM DBA_ROLE_PRIVS;
But still not the information i need. I want to get exactly the same data as from table ROLE_TAB_PRIVS but
as i said i am missing a lot of roles in that table (missing as i do not see them).
Thank you!

Similar Messages

  • Privileges granted to roles sometimes are not effective(not functioning)?

    Hello,
    I have experienced where roles where granted and privileges granted to the roles. The roles are they granted to certain users. But when these users try to perform dml/ddl, they get insufficient priviledges even though these users were granted the roles which do contain the correct priviledges. Why are some priviledges not functioning when they are granted to the roles? To resolve, direct grants were granted to the users. But why aren't they working through the roles? Thank you.

    Hi watson2000 ,
    can you send the scripts...what you have performed.
    Since, I did not faced any problem with granting privliges and roles.
    If you provide some information on that (little more) whjat you have done so that we can help you out..
    Thanks
    Pavan Kumar N

  • Some privileges granted to role not being inherited by users

    I have created a role(app1_role) for a group of users and granted a select number of privileges to app1_role and then granted the app1_role to the users. However some of the privileges are not being inherited by the users in the application. The failures are in the plain sql code NOT in the PL/SQL code. The Oracle version is 10.2 on RedHat zLinux.
    Any insight to why we are seeing this problem would be helpful since I do not want to explicitly grant the privileges to each of the users.

    Can you get the results of querying SESSION_ROLES and SESSION_PRIVS in a session where you are getting the ORA-00942 errors?
    Do your SQL statements include explicit schema names? Or do they rely on synonyms? Public or private synonyms? If you rely on private synonyms, any chance certain users are missing certain synonyms?
    If you query DBA_ROLE_PRIVS for the user (GRANTEE) and role (GRANTED_ROLE), what is the value of DEFAULT_ROLE? Any chance the role was granted as a non-default role?
    Have you verified that in the particular installation that is problematic that the role actually has the grants you expect it to have and that it has been granted to the user(s) you expect it to be granted to?
    Justin

  • Get the privileges granted on a package

    Dear Experts,
    I've got a package and want to retrieve with a sql script all the privileges granted through roles on this package. Any piece of code to do so ?
    Thanks for your help.
    BR,
    Guillaume

    SQL> select * from role_tab_privs where table_name='<YOUR PACKAGE>';

  • Isn't there DBA_ view to see the privileges granted to a role ?

    DB version :11.2
    I couldn't find a DBA_ view which would list all the privileges granted to a role. Finally I had to grant the role to a user and then connect as that granted user and then query ROLE_TAB_PRIVS view. As a DBA , I can't login into business schemas to check this.
    The scenario
    ==============
    SCOTT schema has two tables : HRTB_EMP_MASTER and HELLOWORLD
    I want to grant SELECT privileges on these two tables to another user called TESTUSER but not directly ; through roles
    SQL> conn / as sysdba
    Connected.
    SQL> grant create role to testuser;
    Grant succeeded.
    SQL> conn testuser/test123
    Connected.
    SQL>
    SQL> create role testuser_ro; 
    Role created.
    SQL> conn / as sysdba
    Connected.
    SQL> grant select on scott.hrtb_emp_master to testuser_ro;         --- > Granting the SELECT priv to the role first
    Grant succeeded.
    SQL> grant select on scott.helloworld to testuser_ro;               
    Grant succeeded.
    SQL> SELECT ROLE, OWNER, TABLE_NAME, PRIVILEGE FROM ROLE_TAB_PRIVS where owner = 'SCOTT';  ----> This won't work because I am connected as SYS
                                                              ----> ROLE_TAB_PRIVS is user specific view
    no rows selectedSince I couldn't find a DBA view which will the privileges granted to a role , I granted the role to the user I had to login to the user (against our security policy) and query
    ROLE_TAB_PRIVS.
    SQL> grant testuser_ro to testuser;
    Grant succeeded.
    SQL> SELECT ROLE, OWNER, TABLE_NAME, PRIVILEGE FROM ROLE_TAB_PRIVS where owner = 'SCOTT';
    no rows selected
    SQL> conn testuser/test123
    Connected.
    SQL> SELECT ROLE, OWNER, TABLE_NAME, PRIVILEGE FROM ROLE_TAB_PRIVS where owner = 'SCOTT';
    ROLE            OWNER           TABLE_NAME           PRIVILEGE
    TESTUSER_RO     SCOTT           HELLOWORLD           SELECT
    TESTUSER_RO     SCOTT           HRTB_EMP_MASTER      SELECT

    you should search for grantee, not owner
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> create role r1;
    Role created.
    SQL> grant select on sys.v$database to r1;
    grant select on sys.v$database to r1
    ERROR at line 1:
    ORA-02030: can only select from fixed tables/views
    SQL> grant select on sys.v_$database to r1;
    Grant succeeded.
    SQL> select grantee, privilege, owner, table_name from dba_tab_privs where grantee='R1';
    GRANTEE         PRIVILEGE                                OWNER           TABLE_NAME
    R1              SELECT                                   SYS             V_$DATABASE

  • Select Granted By Role Doesn't Work

    Oracle 11.1.0.7.0 running on AIX
    This is crazy I don't know why it is happening or even how it is happening but when I grant a role to a user they still cannot select from the granted tables & views.
    CREATE ROLE RETROMAN_USERS NOT IDENTIFIED
    GRANT SELECT ON YBP.DDA_STATUS_CODES TO RETROMAN_USERS
    GRANT SELECT ON YBP.DEMAND_DRIVEN_ACTIVITY TO RETROMAN_USERS
    GRANT SELECT ON YBP.V_DDA_STATUS_CODES TO RETROMAN_USERS
    GRANT SELECT ON YBP.V_DEMAND_DRIVEN_ACTIVITY TO RETROMAN_USERS
    GRANT RETROMAN_USERS TO SABEL WITH ADMIN OPTION
    GRANT RETROMAN_USERS TO CKING
    GRANT RETROMAN_USERS TO FCROWELL
    GRANT RETROMAN_USERS TO HCAMPBELL
    GRANT RETROMAN_USERS TO LJOHNSON
    GRANT RETROMAN_USERS TO RWILLIAMS
    GRANT RETROMAN_USERS TO LMONTCALM
    When I try to Select * from ybp.Demand_Driven_Activity as hcampbell I get a "table or view does not exist" error. where other users can get results using the same query. Any ideas? I am completely out of them. I am not a DBA and our company doesn't employ a DBA - scary huh. Any help would be greatly appreciated.
    Scott

    OK, the user cannot select from the table...
    $ sqlplus hcampbell@devorcl
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 07:51:33 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> select * from ybp.demand_driven_activity;
    select * from ybp.demand_driven_activity
    ERROR at line 1:
    ORA-00942: table or view does not exist-----
    Let's grant the role and verify that the role is assigned and what privileges it has.
    oracle@qa:/home/oracle
    $ sqlplus sabel@devorcl
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 07:53:21 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> grant retroman_users to hcampbell;
    Grant succeeded.
    SQL> select * from DBA_ROLE_PRIVS where grantee = 'HCAMPBELL';
    GRANTEE                        GRANTED_ROLE                   ADM DEF
    HCAMPBELL                      YBPREGUSER                     NO  YES
    HCAMPBELL                      OOPS                           NO  YES
    HCAMPBELL                      YBPENDUSER                     NO  YES
    HCAMPBELL                      RETROMAN_USERS                 NO  NO-----
    The role does exist (I think) and has the following permissions
    SQL> set linesize 132
    SQL> Select * from role_tab_privs Where   role = 'RETROMAN_USERS';
    ROLE                           OWNER                          TABLE_NAME                     COLUMN_NAME
    PRIVILEGE                                GRA
    RETROMAN_USERS                 YBP                            DEMAND_DRIVEN_ACTIVITY
    SELECT                                   NO
    RETROMAN_USERS                 YBP                            V_DEMAND_DRIVEN_ACTIVITY
    SELECT                                   NO
    RETROMAN_USERS                 YBP                            DDA_STATUS_CODES
    SELECT                                   NO
    ROLE                           OWNER                          TABLE_NAME                     COLUMN_NAME
    PRIVILEGE                                GRA
    RETROMAN_USERS                 YBP                            V_DDA_STATUS_CODES
    SELECT                                   NO
    SQL> exit
    Disconnected from Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options-----
    sys can't see the role though - but that may be normal...
    $ sqlplus sys@devorcl as sysdba
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:30:34 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> Select * from role_tab_privs Where   role = 'RETROMAN_USERS';
    no rows selected-----
    The user still cannot select from the table
    $ sqlplus hcampbell@devorcl
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:39:46 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> select * from ybp.demand_driven_activity;
    select * from ybp.demand_driven_activity
    ERROR at line 1:
    ORA-00942: table or view does not exist-----
    let's try to make it a default role....
    $ sqlplus sabel@devorcl
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:42:59 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> ALTER USER HCAMPBELL DEFAULT ROLE YBPREGUSER, OOPS, YBPENDUSER, retroman_users;
    User altered.
    SQL> exit-----
    after the user logs out and then back on, now user can access the table.
    oracle@qa:/home/oracle
    $ sqlplus hcampbell@devorcl
    SQL*Plus: Release 11.1.0.7.0 - Production on Wed Aug 22 08:47:57 2012
    Copyright (c) 1982, 2008, Oracle.  All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> Select Count(1) from ybp.demand_driven_activity;
      COUNT(1)
        161295If I remove the retroman_users from the default role I can still access the table until I log out and then back in so it must have something to do with default roles. I don't know why I didn't see this before but the other users that were granted the retroman_users role and could access the table had their default role set to ALL. Sorry, I didn't give you all the information that you needed to help me, this might have helped:
    CREATE USER HCAMPBELL
      IDENTIFIED BY h
      DEFAULT TABLESPACE DATASMALL
      TEMPORARY TABLESPACE TEMP
      PROFILE DEFAULT
      ACCOUNT UNLOCK
      -- 4 Roles for HCAMPBELL
      GRANT YBPREGUSER TO HCAMPBELL
      GRANT OOPS TO HCAMPBELL
      GRANT YBPENDUSER TO HCAMPBELL
      GRANT RETROMAN_USERS TO HCAMPBELL
      ALTER USER HCAMPBELL DEFAULT ROLE YBPREGUSER, OOPS, YBPENDUSERI guess I need to read more about Default Roles. Sorry for my belligerent responses.

  • List of Privileges under a ROLE

    Hello, Which database view do I query to derive list of privileges covered under a role? This is on 10g Thanks, R

    SQL> select * from role_sys_privs where role='DBA';
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE SESSION                           YES
    DBA                            ALTER SESSION                            YES
    DBA                            DROP TABLESPACE                          YES
    DBA                            BECOME USER                              YES
    DBA                            DROP ROLLBACK SEGMENT                    YES
    DBA                            SELECT ANY TABLE                         YES
    DBA                            INSERT ANY TABLE                         YES
    DBA                            UPDATE ANY TABLE                         YES
    DBA                            DROP ANY INDEX                           YES
    DBA                            SELECT ANY SEQUENCE                      YES
    DBA                            CREATE ROLE                              YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            EXECUTE ANY PROCEDURE                    YES
    DBA                            ALTER PROFILE                            YES
    DBA                            CREATE ANY DIRECTORY                     YES
    DBA                            CREATE ANY LIBRARY                       YES
    DBA                            EXECUTE ANY LIBRARY                      YES
    DBA                            ALTER ANY INDEXTYPE                      YES
    DBA                            DROP ANY INDEXTYPE                       YES
    DBA                            DEQUEUE ANY QUEUE                        YES
    DBA                            EXECUTE ANY EVALUATION CONTEXT           YES
    DBA                            EXPORT FULL DATABASE                     YES
    DBA                            CREATE RULE                              YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            ALTER ANY SQL PROFILE                    YES
    DBA                            ADMINISTER ANY SQL TUNING SET            YES
    DBA                            CHANGE NOTIFICATION                      YES
    DBA                            ALTER ROLLBACK SEGMENT                   YES
    DBA                            DELETE ANY TABLE                         YES
    DBA                            ALTER DATABASE                           YES
    DBA                            FORCE ANY TRANSACTION                    YES
    DBA                            ALTER ANY PROCEDURE                      YES
    DBA                            DROP ANY TRIGGER                         YES
    DBA                            DROP ANY MATERIALIZED VIEW               YES
    DBA                            UNDER ANY TYPE                           YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            ALTER ANY LIBRARY                        YES
    DBA                            CREATE DIMENSION                         YES
    DBA                            DEBUG ANY PROCEDURE                      YES
    DBA                            CREATE RULE SET                          YES
    DBA                            ALTER ANY RULE SET                       YES
    DBA                            ANALYZE ANY DICTIONARY                   YES
    DBA                            RESTRICTED SESSION                       YES
    DBA                            CREATE TABLESPACE                        YES
    DBA                            ALTER TABLESPACE                         YES
    DBA                            CREATE USER                              YES
    DBA                            ALTER USER                               YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            LOCK ANY TABLE                           YES
    DBA                            CREATE VIEW                              YES
    DBA                            DROP ANY VIEW                            YES
    DBA                            GRANT ANY ROLE                           YES
    DBA                            CREATE TRIGGER                           YES
    DBA                            CREATE TYPE                              YES
    DBA                            EXECUTE ANY OPERATOR                     YES
    DBA                            CREATE ANY DIMENSION                     YES
    DBA                            ALTER ANY DIMENSION                      YES
    DBA                            CREATE ANY OUTLINE                       YES
    DBA                            ADMINISTER DATABASE TRIGGER              YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            RESUMABLE                                YES
    DBA                            FLASHBACK ANY TABLE                      YES
    DBA                            CREATE ANY RULE SET                      YES
    DBA                            EXECUTE ANY RULE SET                     YES
    DBA                            IMPORT FULL DATABASE                     YES
    DBA                            EXECUTE ANY RULE                         YES
    DBA                            EXECUTE ANY PROGRAM                      YES
    DBA                            CREATE ANY TABLE                         YES
    DBA                            CREATE ANY INDEX                         YES
    DBA                            CREATE ANY SEQUENCE                      YES
    DBA                            ALTER ANY ROLE                           YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            ANALYZE ANY                              YES
    DBA                            DROP ANY LIBRARY                         YES
    DBA                            CREATE ANY OPERATOR                      YES
    DBA                            CREATE INDEXTYPE                         YES
    DBA                            UNDER ANY TABLE                          YES
    DBA                            DROP ANY DIMENSION                       YES
    DBA                            SELECT ANY DICTIONARY                    YES
    DBA                            GRANT ANY OBJECT PRIVILEGE               YES
    DBA                            CREATE EVALUATION CONTEXT                YES
    DBA                            CREATE ANY EVALUATION CONTEXT            YES
    DBA                            DROP ANY EVALUATION CONTEXT              YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE ANY RULE                          YES
    DBA                            CREATE JOB                               YES
    DBA                            CREATE ANY JOB                           YES
    DBA                            ALTER SYSTEM                             YES
    DBA                            AUDIT SYSTEM                             YES
    DBA                            CREATE ROLLBACK SEGMENT                  YES
    DBA                            DROP ANY TABLE                           YES
    DBA                            COMMENT ANY TABLE                        YES
    DBA                            CREATE CLUSTER                           YES
    DBA                            ALTER ANY INDEX                          YES
    DBA                            DROP PUBLIC DATABASE LINK                YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE PROFILE                           YES
    DBA                            ALTER ANY MATERIALIZED VIEW              YES
    DBA                            ALTER ANY TYPE                           YES
    DBA                            DROP ANY TYPE                            YES
    DBA                            UNDER ANY VIEW                           YES
    DBA                            EXECUTE ANY INDEXTYPE                    YES
    DBA                            DROP ANY CONTEXT                         YES
    DBA                            ALTER ANY OUTLINE                        YES
    DBA                            ADMINISTER RESOURCE MANAGER              YES
    DBA                            MANAGE SCHEDULER                         YES
    DBA                            MANAGE FILE GROUP                        YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE TABLE                             YES
    DBA                            BACKUP ANY TABLE                         YES
    DBA                            CREATE ANY CLUSTER                       YES
    DBA                            DROP ANY SYNONYM                         YES
    DBA                            DROP PUBLIC SYNONYM                      YES
    DBA                            CREATE ANY VIEW                          YES
    DBA                            CREATE SEQUENCE                          YES
    DBA                            ALTER ANY SEQUENCE                       YES
    DBA                            FORCE TRANSACTION                        YES
    DBA                            CREATE PROCEDURE                         YES
    DBA                            CREATE ANY PROCEDURE                     YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            ALTER RESOURCE COST                      YES
    DBA                            DROP ANY DIRECTORY                       YES
    DBA                            CREATE ANY TYPE                          YES
    DBA                            CREATE ANY INDEXTYPE                     YES
    DBA                            ENQUEUE ANY QUEUE                        YES
    DBA                            ON COMMIT REFRESH                        YES
    DBA                            DEBUG CONNECT SESSION                    YES
    DBA                            DROP ANY RULE SET                        YES
    DBA                            EXECUTE ANY CLASS                        YES
    DBA                            MANAGE ANY FILE GROUP                    YES
    DBA                            ALTER ANY TABLE                          YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            DROP ANY CLUSTER                         YES
    DBA                            CREATE SYNONYM                           YES
    DBA                            CREATE PUBLIC SYNONYM                    YES
    DBA                            DROP ANY SEQUENCE                        YES
    DBA                            DROP ANY ROLE                            YES
    DBA                            AUDIT ANY                                YES
    DBA                            DROP ANY PROCEDURE                       YES
    DBA                            CREATE ANY TRIGGER                       YES
    DBA                            ALTER ANY TRIGGER                        YES
    DBA                            DROP PROFILE                             YES
    DBA                            GRANT ANY PRIVILEGE                      YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE LIBRARY                           YES
    DBA                            CREATE OPERATOR                          YES
    DBA                            DROP ANY OUTLINE                         YES
    DBA                            MERGE ANY VIEW                           YES
    DBA                            ADMINISTER SQL TUNING SET                YES
    DBA                            MANAGE TABLESPACE                        YES
    DBA                            DROP USER                                YES
    DBA                            ALTER ANY CLUSTER                        YES
    DBA                            CREATE ANY SYNONYM                       YES
    DBA                            CREATE DATABASE LINK                     YES
    DBA                            CREATE PUBLIC DATABASE LINK              YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            CREATE MATERIALIZED VIEW                 YES
    DBA                            CREATE ANY MATERIALIZED VIEW             YES
    DBA                            EXECUTE ANY TYPE                         YES
    DBA                            DROP ANY OPERATOR                        YES
    DBA                            QUERY REWRITE                            YES
    DBA                            GLOBAL QUERY REWRITE                     YES
    DBA                            MANAGE ANY QUEUE                         YES
    DBA                            CREATE ANY CONTEXT                       YES
    DBA                            ALTER ANY EVALUATION CONTEXT             YES
    DBA                            ALTER ANY RULE                           YES
    DBA                            DROP ANY RULE                            YES
    ROLE                           PRIVILEGE                                ADM
    DBA                            ADVISOR                                  YES
    DBA                            SELECT ANY TRANSACTION                   YES
    DBA                            DROP ANY SQL PROFILE                     YES
    DBA                            CREATE ANY SQL PROFILE                   YES
    DBA                            READ ANY FILE GROUP                      YES
    DBA                            CREATE EXTERNAL JOB                      YES
    160 rows selected.
    SQL>

  • Grant DBA role

    Hi, i have experienced many time that when you give dba role to any schema it should get the privilege of Create any on all object. but it is not the case after giving dba privilege to schema i have to give create any privilege to that schema though DBA role have that Facility, why is it so.
    Regards
    Vikas Chopkar

    Are you talking about the default role named DBA? If so, that role should rarely be granted to anyone. Either way, on my database it has the privileges you say it doesn't.
    SQL> SELECT * FROM DBA_SYS_PRIVS WHERE GRANTEE='DBA' ORDER BY PRIVILEGE;
    GRANTEE                        PRIVILEGE                                ADM
    DBA                            ADMINISTER ANY SQL TUNING SET            YES
    DBA                            ADMINISTER DATABASE TRIGGER              YES
    DBA                            ADMINISTER RESOURCE MANAGER              YES
    DBA                            ADMINISTER SQL TUNING SET                YES
    DBA                            ADVISOR                                  YES
    DBA                            ALTER ANY CLUSTER                        YES
    DBA                            ALTER ANY DIMENSION                      YES
    DBA                            ALTER ANY EVALUATION CONTEXT             YES
    DBA                            ALTER ANY INDEX                          YES
    DBA                            ALTER ANY INDEXTYPE                      YES
    DBA                            ALTER ANY LIBRARY                        YES
    DBA                            ALTER ANY MATERIALIZED VIEW              YES
    DBA                            ALTER ANY OUTLINE                        YES
    DBA                            ALTER ANY PROCEDURE                      YES
    DBA                            ALTER ANY ROLE                           YES
    DBA                            ALTER ANY RULE                           YES
    DBA                            ALTER ANY RULE SET                       YES
    DBA                            ALTER ANY SEQUENCE                       YES
    DBA                            ALTER ANY SQL PROFILE                    YES
    DBA                            ALTER ANY TABLE                          YES
    DBA                            ALTER ANY TRIGGER                        YES
    DBA                            ALTER ANY TYPE                           YES
    DBA                            ALTER DATABASE                           YES
    DBA                            ALTER PROFILE                            YES
    DBA                            ALTER RESOURCE COST                      YES
    DBA                            ALTER ROLLBACK SEGMENT                   YES
    DBA                            ALTER SESSION                            YES
    DBA                            ALTER SYSTEM                             YES
    DBA                            ALTER TABLESPACE                         YES
    DBA                            ALTER USER                               YES
    DBA                            ANALYZE ANY                              YES
    DBA                            ANALYZE ANY DICTIONARY                   YES
    DBA                            AUDIT ANY                                YES
    DBA                            AUDIT SYSTEM                             YES
    DBA                            BACKUP ANY TABLE                         YES
    DBA                            BECOME USER                              YES
    DBA                            CHANGE NOTIFICATION                      YES
    DBA                            COMMENT ANY TABLE                        YES
    DBA                            CREATE ANY CLUSTER                       YES
    DBA                            CREATE ANY CONTEXT                       YES
    DBA                            CREATE ANY DIMENSION                     YES
    DBA                            CREATE ANY DIRECTORY                     YES
    DBA                            CREATE ANY EVALUATION CONTEXT            YES
    DBA                            CREATE ANY INDEX                         YES
    DBA                            CREATE ANY INDEXTYPE                     YES
    DBA                            CREATE ANY JOB                           YES
    DBA                            CREATE ANY LIBRARY                       YES
    DBA                            CREATE ANY MATERIALIZED VIEW             YES
    DBA                            CREATE ANY OPERATOR                      YES
    DBA                            CREATE ANY OUTLINE                       YES
    DBA                            CREATE ANY PROCEDURE                     YES
    DBA                            CREATE ANY RULE                          YES
    DBA                            CREATE ANY RULE SET                      YES
    DBA                            CREATE ANY SEQUENCE                      YES
    DBA                            CREATE ANY SQL PROFILE                   YES
    DBA                            CREATE ANY SYNONYM                       YES
    DBA                            CREATE ANY TABLE                         YES
    DBA                            CREATE ANY TRIGGER                       YES
    DBA                            CREATE ANY TYPE                          YES
    DBA                            CREATE ANY VIEW                          YES
    DBA                            CREATE CLUSTER                           YES
    DBA                            CREATE DATABASE LINK                     YES
    DBA                            CREATE DIMENSION                         YES
    DBA                            CREATE EVALUATION CONTEXT                YES
    DBA                            CREATE EXTERNAL JOB                      YES
    DBA                            CREATE INDEXTYPE                         YES
    DBA                            CREATE JOB                               YES
    DBA                            CREATE LIBRARY                           YES
    DBA                            CREATE MATERIALIZED VIEW                 YES
    DBA                            CREATE OPERATOR                          YES
    DBA                            CREATE PROCEDURE                         YES
    DBA                            CREATE PROFILE                           YES
    DBA                            CREATE PUBLIC DATABASE LINK              YES
    DBA                            CREATE PUBLIC SYNONYM                    YES
    DBA                            CREATE ROLE                              YES
    DBA                            CREATE ROLLBACK SEGMENT                  YES
    DBA                            CREATE RULE                              YES
    DBA                            CREATE RULE SET                          YES
    DBA                            CREATE SEQUENCE                          YES
    DBA                            CREATE SESSION                           YES
    DBA                            CREATE SYNONYM                           YES
    DBA                            CREATE TABLE                             YES
    DBA                            CREATE TABLESPACE                        YES
    DBA                            CREATE TRIGGER                           YES
    DBA                            CREATE TYPE                              YES
    DBA                            CREATE USER                              YES
    DBA                            CREATE VIEW                              YES
    DBA                            DEBUG ANY PROCEDURE                      YES
    DBA                            DEBUG CONNECT SESSION                    YES
    DBA                            DELETE ANY TABLE                         YES
    DBA                            DEQUEUE ANY QUEUE                        YES
    DBA                            DROP ANY CLUSTER                         YES
    DBA                            DROP ANY CONTEXT                         YES
    DBA                            DROP ANY DIMENSION                       YES
    DBA                            DROP ANY DIRECTORY                       YES
    DBA                            DROP ANY EVALUATION CONTEXT              YES
    DBA                            DROP ANY INDEX                           YES
    DBA                            DROP ANY INDEXTYPE                       YES
    DBA                            DROP ANY LIBRARY                         YES
    DBA                            DROP ANY MATERIALIZED VIEW               YES
    DBA                            DROP ANY OPERATOR                        YES
    DBA                            DROP ANY OUTLINE                         YES
    DBA                            DROP ANY PROCEDURE                       YES
    DBA                            DROP ANY ROLE                            YES
    DBA                            DROP ANY RULE                            YES
    DBA                            DROP ANY RULE SET                        YES
    DBA                            DROP ANY SEQUENCE                        YES
    DBA                            DROP ANY SQL PROFILE                     YES
    DBA                            DROP ANY SYNONYM                         YES
    DBA                            DROP ANY TABLE                           YES
    DBA                            DROP ANY TRIGGER                         YES
    DBA                            DROP ANY TYPE                            YES
    DBA                            DROP ANY VIEW                            YES
    DBA                            DROP PROFILE                             YES
    DBA                            DROP PUBLIC DATABASE LINK                YES
    DBA                            DROP PUBLIC SYNONYM                      YES
    DBA                            DROP ROLLBACK SEGMENT                    YES
    DBA                            DROP TABLESPACE                          YES
    DBA                            DROP USER                                YES
    DBA                            ENQUEUE ANY QUEUE                        YES
    DBA                            EXECUTE ANY CLASS                        YES
    DBA                            EXECUTE ANY EVALUATION CONTEXT           YES
    DBA                            EXECUTE ANY INDEXTYPE                    YES
    DBA                            EXECUTE ANY LIBRARY                      YES
    DBA                            EXECUTE ANY OPERATOR                     YES
    DBA                            EXECUTE ANY PROCEDURE                    YES
    DBA                            EXECUTE ANY PROGRAM                      YES
    DBA                            EXECUTE ANY RULE                         YES
    DBA                            EXECUTE ANY RULE SET                     YES
    DBA                            EXECUTE ANY TYPE                         YES
    DBA                            EXPORT FULL DATABASE                     YES
    DBA                            FLASHBACK ANY TABLE                      YES
    DBA                            FORCE ANY TRANSACTION                    YES
    DBA                            FORCE TRANSACTION                        YES
    DBA                            GLOBAL QUERY REWRITE                     YES
    DBA                            GRANT ANY OBJECT PRIVILEGE               YES
    DBA                            GRANT ANY PRIVILEGE                      YES
    DBA                            GRANT ANY ROLE                           YES
    DBA                            IMPORT FULL DATABASE                     YES
    DBA                            INSERT ANY TABLE                         YES
    DBA                            LOCK ANY TABLE                           YES
    DBA                            MANAGE ANY FILE GROUP                    YES
    DBA                            MANAGE ANY QUEUE                         YES
    DBA                            MANAGE FILE GROUP                        YES
    DBA                            MANAGE SCHEDULER                         YES
    DBA                            MANAGE TABLESPACE                        YES
    DBA                            MERGE ANY VIEW                           YES
    DBA                            ON COMMIT REFRESH                        YES
    DBA                            QUERY REWRITE                            YES
    DBA                            READ ANY FILE GROUP                      YES
    DBA                            RESTRICTED SESSION                       YES
    DBA                            RESUMABLE                                YES
    DBA                            SELECT ANY DICTIONARY                    YES
    DBA                            SELECT ANY SEQUENCE                      YES
    DBA                            SELECT ANY TABLE                         YES
    DBA                            SELECT ANY TRANSACTION                   YES
    DBA                            UNDER ANY TABLE                          YES
    DBA                            UNDER ANY TYPE                           YES
    DBA                            UNDER ANY VIEW                           YES
    DBA                            UPDATE ANY TABLE                         YES

  • Have doubt in privilege granting

    Hi All,
    We have oracle 10g database.
    one of our developer wants to perform EXECUTE IMMEDIATE and DBMS_OUTPUT in his PL/SQL procedures.
    Can you please help me to know what privilege i need to grant him to do this?

    Hi,
    To create procedures, the user (let's call him Owen) needs the CONNECT and CREATE PROCEDURE system privileges.
    Owen needs EXECUTE privileges on any packages (including sys.dbms_output) in order to call procedures in those packages. These privileges must be granted directly to OWEN (or to the pseudo-user PUBLIC); privileges granted to some role that is, in turn, granted to Owen, won't be enough. (The system privilege EXECUTE ANY PROCEDURE is sufficient, but it can be dangerous to grant that.)
    No additional privileges are needed to write a procedure that uses EXECUTE IMMEDIATE, but privileges will be needed to run the procedure.
    In procedures that are created with AUTHID DEFINER (which is the default), then Owen needs whatever privileges are needed to do what the EXECUTE MMEDIATE statement does. In this case, the privilege must be granted directly to OWEN (or to PUBLIC).
    In procedures that are created with AUTHID CURRENT_USER, then whoever calls the procedure (whether that is Owen or sombody else) needs the appropriate privileges. In this case, the privileges do not need to be granted directly to the user (or to PUBLIC); privileges granted via a role will work.
    Does the user really need to do EXECUTE IMMEDIATE? Sometimes it's really necessary, but sometimes it not.

  • Does The Create Table Privilege allow to insert data ?

    Hi,
    I wish to know if it's possible that a user UserA allows another user UserB to create a table but does not allow him (does not allow UserB ) to insert data in a table UserB has created .If it's possible, I would want to know the commands to do that.
    Thanks .

    sys@LINUX>create user user1 identified by user1;
    User created.
    sys@LINUX>grant connect, resource to user1;
    Grant succeeded.
    sys@LINUX>create user user2 identified by user2;
    User created.
    sys@LINUX>grant connect, resource to user2;
    Grant succeeded.
    sys@LINUX>conn user1/user1
    Connected.
    user1@LINUX>create table t (id number);
    Table created.
    user1@LINUX>disc
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.1.0.5.0 - Production
    With the Partitioning, OLAP and Data Mining options
    user1@LINUX>conn / as sysdba
    Connected.
    sys@LINUX>grant create any table to user2;
    Grant succeeded.
    sys@LINUX>conn user2/user2
    Connected.
    user2@LINUX>create table user1.tab (id number);
    Table created.
    user2@LINUX>insert into user1.tab values(1);
    insert into user1.tab values(1)
    ERROR at line 1:
    ORA-01031: insufficient privileges
    user2@LINUX>select * from user1.tab;
    select * from user1.tab
    ERROR at line 1:
    ORA-01031: insufficient privileges
    user2@LINUX>delete from user1.tab;
    delete from user1.tab
    ERROR at line 1:
    ORA-01031: insufficient privileges
    user2@LINUX>update user1.tab set id=1;
    update user1.tab set id=1
    ERROR at line 1:
    ORA-01031: insufficient privilegesInteresting issue. Although user2 was able to create a table in user1 schema (because he has "create any table" privilege), he's NOT able to run ANY DML on that table (NO insert, update, delete and select)!
    Kamran Agayev A. (10g OCP)
    http://kamranagayev.wordpress.com
    [Step by Step install Oracle on Linux and Automate the installation using Shell Script |http://kamranagayev.wordpress.com/2009/05/01/step-by-step-installing-oracle-database-10g-release-2-on-linux-centos-and-automate-the-installation-using-linux-shell-script/]

  • Database Vault Owner Grant Any Role Permission

    So I just noticed that the role DV_OWNER has the system privilege to GRANT ANY ROLE assigned to it by default. I was wondering if this is necessary for something. If not I would like to remove it. We would prefer the Database Vault owner person to not have any permissions execept for logging into the Data Vault console to modify realms and rules and stuff, and as well as looking at audit logs. The DV_OWNER role also has ADMINISTER DATABASE TRIGGER and ALTER ANY TRIGGER privileges which I would like to remove as well. Any body have any opinions on this?
    Oracle EE 11.2.0.2 on Windows 2008 R2
    Thanks.

    Sysdba can issue powerful statements such as create user, drop user, alter user, create profile .. and so on... can be done only if it is allowed so by modifying the Can maintain accounts/profiles rule set.
    You can also login with dvsys account but that account is locked after installation. So unlock it with
    alter user username account unlock; command. And be aware that ANY system privileges are blocked in protected schemas. You can try to grant the following roles in DB Vault := DV_OWNER, DV_REALM_OWNER, DV_REALM_RESOURCE, DV_ADMIN, DV_PUBLIC, DV_ACCTMGR, DV_SECANALYST
    Following can help you
    SELECT TABLE_NAME, OWNER, PRIVILEGE FROM DBA_TAB_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
    SELECT PRIVILEGE FROM DBA_SYS_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
    Regards
    Karan

  • ALTER TABLE privilege and CREATE/DROP/ENABLE/DISABLE constraint privilege

    Hi,
    I am looking for some detailed info regarding the below previleges
    ALTER TABLE, CREATE CONSTRAINT, DROP CONSTRAINT, ENABLE CONSTRAINT AND DISABLE CONSTRAINT PRiVILEGES.
    I have two schemas 'A' and 'B', I want to provide user 'A' with Alter table, create or drop constraint,Enable or Disable constraint on schema B.
    Please let me know how to make this work.
    Thank you

    I got the answer for my second question, I have an option to grant 'Alter ANY table' privilege to the user.Yes, but you should not do that.
    Regarding question one, Suppose I have two schemas A and B and I want Schema A to have alter table privilege on all tables of Schema B.
    Can I do this in one command No
    or I need to grant alter on each table saperately?Yes
    If I am chosing the second option for each table saperately then whenever a table is added in schema B we need to grant privilege on that table as well.Yes. But nothing strange there. Designing and creating objects includes the privileges on them.
    If user A is granted with alter table privilege on a table which user B owns then can user A drop/create/enable/disable constraints for that table?Yes, isn't that what all this about?
    Again, letting one user alter the objects of another user is generally not such a good idea. Hope you see this from our discussion.
    Alter table privilege includes adding and dropping columns. This is why I suggested writing a procedure that does exactly what you need. And then grant execute on that to A.
    The best thing of course would be NOT TO disable the constraints, they are probably there for a reason.
    I am currently handling an issue where one session doing this, deadlocks with another session doing only selects - From other tables, that is!
    Regards
    Peter

  • Query to get the Discoverer privileges granted to user / responsibility

    Hello,
    I am discussing the oracle applications EUL here.
    I am interested to know the privileges granted to a user / responsibility from backend or any option with "eulapi" utility which can be used to list the same.
    Which EUL table should I query to get the privileges granted to a user / responsinility?
    Thanks,
    Ajay

    Hi Ajay,
    Which EUL table should I query to get the privileges granted to a user / responsinility?Go through this link you wil get what your looking for.
    Re: List of Users in Admin layer under Privileges
    Hope this helps you.
    Best Wishes,
    Kranthi.

  • How can i view all privileges granted to an user?

    How can i view all privileges granted to an user? I have access to dba_ views.

    You should look at:
    http://download.oracle.com/docs/cd/B10501_01/nav/catalog_views.htm?remark=homepage#index-DBA
    Look at the views that have the letters "PRIVS" in their names:
    DBA_COL_PRIVS
    DBA_ROLE_PRIVS
    DBA_RSRC_CONSUMER_GROUP_PRIVS
    DBA_RSRC_MANAGER_SYSTEM_PRIVS
    DBA_SYS_PRIVS
    DBA_TAB_PRIVS
    ROLE_ROLE_PRIVS
    ROLE_SYS_PRIVS
    ROLE_TAB_PRIVS
    ROLE_WM_PRIVS
    SESSION_PRIVS
    Depending on what privileges you want that is where to look.
    Regards
    Tim
    You can get help from teachers, but you are going to have to learn a lot by yourself, sitting alone in a room.[]....Dr. Seus

  • Error while granting BPMOrganizationAdmin role to SOAOperator.

    Error Starting While starting SOA server. Please advise.
    <Mar 5, 2015 12:56:08 PM EST> <Error> <oracle.bpm.services.organization> <BEA-000000> <Exception
    exception.70692.type: error
    exception.70692.severity: 2
    exception.70692.name: Error while granting BPMOrganizationAdmin role to SOAOperator.
    exception.70692.description: Error occured while granting the application role BPMOrganizationAdmin to application role SOAOperator.
    exception.70692.fix: In the policy store, please add SOAOperator role as a member of BPMOrganizationAdmin role, if it is not already present.
    ORABPEL-10513
    Cannot get application roles from application identified by "{0}".
    An error occurred while getting application roles from application identified by "soa-infra".
    The underlying APIs threw an exception. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
            at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:920)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
            at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
            at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
            at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
            at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
            at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
            at $Proxy307.postDeployInit(Unknown Source)
            at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
            at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
            at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
            at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
    Caused By: ORABPEL-10510
    Application role not found.
    Application role "BPMOrganizationAdmin" could not be found for application identified by "soa-infra".
    Check if the application role exists in the repository associated with the application. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
            at oracle.tip.pc.services.identity.jps.JpsProvider$9.run(JpsProvider.java:2338)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRoleEntry(JpsProvider.java:2333)
            at oracle.tip.pc.services.identity.jps.JpsProvider.access$000(JpsProvider.java:169)
            at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:917)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
            at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
            at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
            at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
            at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
            at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
            at $Proxy307.postDeployInit(Unknown Source)
            at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
            at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
            at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
            at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
    >
    <Mar 5, 2015 12:56:08 PM EST> <Error> <oracle.bpm.common> <BEA-000000> <Exception
    BPM-70692
    Exception
    exception.70692.type: error
    exception.70692.severity: 2
    exception.70692.name: Error while granting BPMOrganizationAdmin role to SOAOperator.
    exception.70692.description: Error occured while granting the application role BPMOrganizationAdmin to application role SOAOperator.
    exception.70692.fix: In the policy store, please add SOAOperator role as a member of BPMOrganizationAdmin role, if it is not already present.
            at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:324)
            at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:29)
            at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
            at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
            at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
            at $Proxy307.postDeployInit(Unknown Source)
            at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
            at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
            at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
            at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
    Caused By: ORABPEL-10513
    Cannot get application roles from application identified by "{0}".
    An error occurred while getting application roles from application identified by "soa-infra".
    The underlying APIs threw an exception. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
            at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:920)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
            at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
            at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
            at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
            at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
            at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
            at $Proxy307.postDeployInit(Unknown Source)
            at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
            at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
            at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
            at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
    Caused By: ORABPEL-10510
    Application role not found.
    Application role "BPMOrganizationAdmin" could not be found for application identified by "soa-infra".
    Check if the application role exists in the repository associated with the application. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
            at oracle.tip.pc.services.identity.jps.JpsProvider$9.run(JpsProvider.java:2338)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRoleEntry(JpsProvider.java:2333)
            at oracle.tip.pc.services.identity.jps.JpsProvider.access$000(JpsProvider.java:169)
            at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:917)
            at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
            at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
            at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
            at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
            at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
            at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
            at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
            at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
            at $Proxy307.postDeployInit(Unknown Source)
            at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
            at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
            at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
            at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
    >

    Hi user,
    Can you give us some information on the version you are using and your security setup? Are you using an external security provider? Because to me it sounds that you are using an external LDAP server.
    Antonis

Maybe you are looking for