Unable to GRANT dba to user

Hi,
Using oracle 10g I am facing problem and I do not know what I have done to my database.
When I create user while logon as SYSTEM and I want to grant dba to that user I am getting this message that 'No such role exit'. When I see under roles I can see only two roles
1. AQ_Administrator_Role
2 MGMT_USER
No other roles are seen. Please help me how I can get back all roles and preveliges for system and for sys also as same is the case with sys.
Thanks.

User sys, unless something is out of sorts with the database catalog, and sys has to connect with the sysdba role.
If you switch user to the oracle software (install) owner, should also be able to
connect / as sysdba;

Similar Messages

Unable to grant sysdba to user

Hi,
On my PC i am using Redhat 5. when I grant sysdba privilege to user hr it gives an error.
SQL> grant sysdba to hr;
grant sysdba to hr
ERROR at line 1:
ORA-01994: GRANT failed: password file missing or disabled
I check the password file is in place in the folder HOME/dbs. what can be the problem.
Plz help
Thanx

It works for me.
bcm@bcm-laptop:~$ sqlplus
SQL*Plus: Release 11.2.0.1.0 Production on Mon Nov 1 10:39:30 2010
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter user-name: / as sysdba
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> grant sysdba to hr;
Grant succeeded.Either you are mistaken or Oracle is.
Either you have an error of omission or error of commission, but without knowing what you have & what you do, no advice is possible.
Is COPY & PASTE broken for you?
Post results of
SELECT * from v$version;

Unable to save info on user oracle - incorrect password (OB users manager)

After configuring OB Express with a tape-drive and starting a rman-backup I got those messages from catxcr -l0 <job id>:
oracle/6.1: 2008/03/07.14:50:23 ______________________________________________________________________
oracle/6.1: 2008/03/07.14:50:23
oracle/6.1: 2008/03/07.14:50:23 Transcript for job oracle/6.1 running on rac1
oracle/6.1: 2008/03/07.14:50:23
oracle/6.1: 2008/03/07.14:50:24 (mt) qdv__read_label() failed - filemark encountered (OB device mgr)
oracle/6.1: 2008/03/07.14:50:24 Info: volume in tape2 is usable for this operation.
oracle/6.1: 2008/03/07.14:50:24 It must be overwritten at BOT.
oracle/6.1: 2008/03/07.14:50:24 (pvfw) at BOT
oracle/6.1: 2008/03/07.14:50:24 (pvfw) mounted ok
oracle/6.1: 2008/03/07.14:50:24 (pvfw) pos_vol_cleanup not returning pstate
oracle/6.1: 2008/03/07.14:50:24 (dmap) tape2 success
oracle/6.1: Error: Unable to save info on user oracle - incorrect password (OB users manager)
oracle/6.1:
There's actually a user oracle created and the password set:
ob> lsuser -l oracle
oracle:
Password: (set)
User class: oracle
Given name: [none]
UNIX name: oracle
UNIX group: dba
Windows domain/acct: [all] Administrator
NDMP server user: no
Email address: [none]
UUID: 503b6654-cdc1-102a-a3a8-00116b324932
Preauthorized access:
Hostname: [all]
Username: [all]
Windows domain: [all]
RMAN enabled: yes
Cmdline enabled: no
How to resolve this?
Thanks.

Well the list above shows that you have configured a pre-authorized access for the oracle user, and this is where the password check is failing. If you don't have any Windows in your OSB domain then you should remove this entry so it just shows as [none]
admin:
Password: (set)
User class: admin
Given name: [none]
UNIX name: root
UNIX group: root
Windows domain/acct: [none]
NDMP server user: no
Email address: [none]
UUID: e2948bfc-c3d2-1028-abd2-001422525e7e
Preauthorized access: [none]

Unable to grant privileges to enque or deque

Hi ...
I am new to AQ. I am trying to send a notification mail using JMS when something changes in the database. I am just going through a guide for the beginers. ie
http://www.oracle.com/technology/products/ias/toplink/technical/tips/DbChangeNotification/index.htm
I connected to the database as system admin.But I am unable to grant previleges to any general user. I am getting "ORA-00900 invalid SQL statement" error.
How can I set up the environment for Advanced Queuing and How can I resolve this issue?
I would appreciate any help or relevant material to accomplish my task.
Thanks and Regards,
Prince.

sql i am tryin to run.
EXEC DBMS_AQADM.GRANT_SYSTEM_PRIVILEGE(privilege => 'ENQUEUE_ANY',grantee => 'dbuser',admin_option => FALSE);
Error message:
ORA - 00900: invalid sql statement.
vendor code:900
Thanks for the help,
Prince

How can i view all privileges granted to an user?

How can i view all privileges granted to an user? I have access to dba_ views.

You should look at:
http://download.oracle.com/docs/cd/B10501_01/nav/catalog_views.htm?remark=homepage#index-DBA
Look at the views that have the letters "PRIVS" in their names:
DBA_COL_PRIVS
DBA_ROLE_PRIVS
DBA_RSRC_CONSUMER_GROUP_PRIVS
DBA_RSRC_MANAGER_SYSTEM_PRIVS
DBA_SYS_PRIVS
DBA_TAB_PRIVS
ROLE_ROLE_PRIVS
ROLE_SYS_PRIVS
ROLE_TAB_PRIVS
ROLE_WM_PRIVS
SESSION_PRIVS
Depending on what privileges you want that is where to look.
Regards
Tim
You can get help from teachers, but you are going to have to learn a lot by yourself, sitting alone in a room.[]....Dr. Seus

Grant DBA role

Hi, i have experienced many time that when you give dba role to any schema it should get the privilege of Create any on all object. but it is not the case after giving dba privilege to schema i have to give create any privilege to that schema though DBA role have that Facility, why is it so.
Regards
Vikas Chopkar

Are you talking about the default role named DBA? If so, that role should rarely be granted to anyone. Either way, on my database it has the privileges you say it doesn't.
SQL> SELECT * FROM DBA_SYS_PRIVS WHERE GRANTEE='DBA' ORDER BY PRIVILEGE;
GRANTEE                        PRIVILEGE                                ADM
DBA                            ADMINISTER ANY SQL TUNING SET            YES
DBA                            ADMINISTER DATABASE TRIGGER              YES
DBA                            ADMINISTER RESOURCE MANAGER              YES
DBA                            ADMINISTER SQL TUNING SET                YES
DBA                            ADVISOR                                  YES
DBA                            ALTER ANY CLUSTER                        YES
DBA                            ALTER ANY DIMENSION                      YES
DBA                            ALTER ANY EVALUATION CONTEXT             YES
DBA                            ALTER ANY INDEX                          YES
DBA                            ALTER ANY INDEXTYPE                      YES
DBA                            ALTER ANY LIBRARY                        YES
DBA                            ALTER ANY MATERIALIZED VIEW              YES
DBA                            ALTER ANY OUTLINE                        YES
DBA                            ALTER ANY PROCEDURE                      YES
DBA                            ALTER ANY ROLE                           YES
DBA                            ALTER ANY RULE                           YES
DBA                            ALTER ANY RULE SET                       YES
DBA                            ALTER ANY SEQUENCE                       YES
DBA                            ALTER ANY SQL PROFILE                    YES
DBA                            ALTER ANY TABLE                          YES
DBA                            ALTER ANY TRIGGER                        YES
DBA                            ALTER ANY TYPE                           YES
DBA                            ALTER DATABASE                           YES
DBA                            ALTER PROFILE                            YES
DBA                            ALTER RESOURCE COST                      YES
DBA                            ALTER ROLLBACK SEGMENT                   YES
DBA                            ALTER SESSION                            YES
DBA                            ALTER SYSTEM                             YES
DBA                            ALTER TABLESPACE                         YES
DBA                            ALTER USER                               YES
DBA                            ANALYZE ANY                              YES
DBA                            ANALYZE ANY DICTIONARY                   YES
DBA                            AUDIT ANY                                YES
DBA                            AUDIT SYSTEM                             YES
DBA                            BACKUP ANY TABLE                         YES
DBA                            BECOME USER                              YES
DBA                            CHANGE NOTIFICATION                      YES
DBA                            COMMENT ANY TABLE                        YES
DBA                            CREATE ANY CLUSTER                       YES
DBA                            CREATE ANY CONTEXT                       YES
DBA                            CREATE ANY DIMENSION                     YES
DBA                            CREATE ANY DIRECTORY                     YES
DBA                            CREATE ANY EVALUATION CONTEXT            YES
DBA                            CREATE ANY INDEX                         YES
DBA                            CREATE ANY INDEXTYPE                     YES
DBA                            CREATE ANY JOB                           YES
DBA                            CREATE ANY LIBRARY                       YES
DBA                            CREATE ANY MATERIALIZED VIEW             YES
DBA                            CREATE ANY OPERATOR                      YES
DBA                            CREATE ANY OUTLINE                       YES
DBA                            CREATE ANY PROCEDURE                     YES
DBA                            CREATE ANY RULE                          YES
DBA                            CREATE ANY RULE SET                      YES
DBA                            CREATE ANY SEQUENCE                      YES
DBA                            CREATE ANY SQL PROFILE                   YES
DBA                            CREATE ANY SYNONYM                       YES
DBA                            CREATE ANY TABLE                         YES
DBA                            CREATE ANY TRIGGER                       YES
DBA                            CREATE ANY TYPE                          YES
DBA                            CREATE ANY VIEW                          YES
DBA                            CREATE CLUSTER                           YES
DBA                            CREATE DATABASE LINK                     YES
DBA                            CREATE DIMENSION                         YES
DBA                            CREATE EVALUATION CONTEXT                YES
DBA                            CREATE EXTERNAL JOB                      YES
DBA                            CREATE INDEXTYPE                         YES
DBA                            CREATE JOB                               YES
DBA                            CREATE LIBRARY                           YES
DBA                            CREATE MATERIALIZED VIEW                 YES
DBA                            CREATE OPERATOR                          YES
DBA                            CREATE PROCEDURE                         YES
DBA                            CREATE PROFILE                           YES
DBA                            CREATE PUBLIC DATABASE LINK              YES
DBA                            CREATE PUBLIC SYNONYM                    YES
DBA                            CREATE ROLE                              YES
DBA                            CREATE ROLLBACK SEGMENT                  YES
DBA                            CREATE RULE                              YES
DBA                            CREATE RULE SET                          YES
DBA                            CREATE SEQUENCE                          YES
DBA                            CREATE SESSION                           YES
DBA                            CREATE SYNONYM                           YES
DBA                            CREATE TABLE                             YES
DBA                            CREATE TABLESPACE                        YES
DBA                            CREATE TRIGGER                           YES
DBA                            CREATE TYPE                              YES
DBA                            CREATE USER                              YES
DBA                            CREATE VIEW                              YES
DBA                            DEBUG ANY PROCEDURE                      YES
DBA                            DEBUG CONNECT SESSION                    YES
DBA                            DELETE ANY TABLE                         YES
DBA                            DEQUEUE ANY QUEUE                        YES
DBA                            DROP ANY CLUSTER                         YES
DBA                            DROP ANY CONTEXT                         YES
DBA                            DROP ANY DIMENSION                       YES
DBA                            DROP ANY DIRECTORY                       YES
DBA                            DROP ANY EVALUATION CONTEXT              YES
DBA                            DROP ANY INDEX                           YES
DBA                            DROP ANY INDEXTYPE                       YES
DBA                            DROP ANY LIBRARY                         YES
DBA                            DROP ANY MATERIALIZED VIEW               YES
DBA                            DROP ANY OPERATOR                        YES
DBA                            DROP ANY OUTLINE                         YES
DBA                            DROP ANY PROCEDURE                       YES
DBA                            DROP ANY ROLE                            YES
DBA                            DROP ANY RULE                            YES
DBA                            DROP ANY RULE SET                        YES
DBA                            DROP ANY SEQUENCE                        YES
DBA                            DROP ANY SQL PROFILE                     YES
DBA                            DROP ANY SYNONYM                         YES
DBA                            DROP ANY TABLE                           YES
DBA                            DROP ANY TRIGGER                         YES
DBA                            DROP ANY TYPE                            YES
DBA                            DROP ANY VIEW                            YES
DBA                            DROP PROFILE                             YES
DBA                            DROP PUBLIC DATABASE LINK                YES
DBA                            DROP PUBLIC SYNONYM                      YES
DBA                            DROP ROLLBACK SEGMENT                    YES
DBA                            DROP TABLESPACE                          YES
DBA                            DROP USER                                YES
DBA                            ENQUEUE ANY QUEUE                        YES
DBA                            EXECUTE ANY CLASS                        YES
DBA                            EXECUTE ANY EVALUATION CONTEXT           YES
DBA                            EXECUTE ANY INDEXTYPE                    YES
DBA                            EXECUTE ANY LIBRARY                      YES
DBA                            EXECUTE ANY OPERATOR                     YES
DBA                            EXECUTE ANY PROCEDURE                    YES
DBA                            EXECUTE ANY PROGRAM                      YES
DBA                            EXECUTE ANY RULE                         YES
DBA                            EXECUTE ANY RULE SET                     YES
DBA                            EXECUTE ANY TYPE                         YES
DBA                            EXPORT FULL DATABASE                     YES
DBA                            FLASHBACK ANY TABLE                      YES
DBA                            FORCE ANY TRANSACTION                    YES
DBA                            FORCE TRANSACTION                        YES
DBA                            GLOBAL QUERY REWRITE                     YES
DBA                            GRANT ANY OBJECT PRIVILEGE               YES
DBA                            GRANT ANY PRIVILEGE                      YES
DBA                            GRANT ANY ROLE                           YES
DBA                            IMPORT FULL DATABASE                     YES
DBA                            INSERT ANY TABLE                         YES
DBA                            LOCK ANY TABLE                           YES
DBA                            MANAGE ANY FILE GROUP                    YES
DBA                            MANAGE ANY QUEUE                         YES
DBA                            MANAGE FILE GROUP                        YES
DBA                            MANAGE SCHEDULER                         YES
DBA                            MANAGE TABLESPACE                        YES
DBA                            MERGE ANY VIEW                           YES
DBA                            ON COMMIT REFRESH                        YES
DBA                            QUERY REWRITE                            YES
DBA                            READ ANY FILE GROUP                      YES
DBA                            RESTRICTED SESSION                       YES
DBA                            RESUMABLE                                YES
DBA                            SELECT ANY DICTIONARY                    YES
DBA                            SELECT ANY SEQUENCE                      YES
DBA                            SELECT ANY TABLE                         YES
DBA                            SELECT ANY TRANSACTION                   YES
DBA                            UNDER ANY TABLE                          YES
DBA                            UNDER ANY TYPE                           YES
DBA                            UNDER ANY VIEW                           YES
DBA                            UPDATE ANY TABLE                         YES

Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

Hi,
For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
BR,
Mangesh

Can not log into server computer with any accounts - "You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."

I have a Mac mini running the latest version of OS X and Server. Been running fine and flawlessly. However, I had a strange problem with the iCloud preferences panel crashing when I tried to access it, so I rebooted. Now I can not log into the system with any accounts. My master admin account (along with all the others) gives me the error:
You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."
I am able to see the server from other macs and I can log into it using the same account, but it only shows me a few of the shared folders I have access to but NOT to my main directories.
Rebooting into Command-R and doing a disk utility, I try and repair permission on that drive and get a bunch of errors like:
ACL found but not expected on Users
Repaired "Users"
ACL found but not expected on Users/.localized
Repaired "Users/.localized"
ACL found but not expected on Users/Shared
Repaired "Users/shared"
ACL found but not expected on Users/Shared/.localized
Repaired "Users/Shared/.localized"
Permissions repair complete.
But rebooting is no joy...same problem. Any idea what is going on or how to repair it? Should I do a time machine restore? Complete new OS X install? Any idea what is causing this or how to salvage it?

Got everything to re-install and it worked fine...for a few hours. Then I came in to find ALL of my network users deleted. Just GONE. Then found out the Open Directory was trashed and was unable to open, recover or restore from a backup. Looks like I may have a bad drive here.
I installed a new drive in the system, re-installed and so far (for a couple of hours anyway) the system seems to be working and stable.

Unable to reset password of user through IDM UI (IDM 7.1)

Hello,
We are unable to reset password of users in SAP Backend System through IDM UI.
The moment we enter new password and submit, we are getting below dump.
Any idea???
java.lang.NullPointerException
at com.sap.idm.wd.wf.task.TaskCompView.onActionSave(TaskCompView.java:172)
at com.sap.idm.wd.wf.task.wdp.InternalTaskCompView.wdInvokeEventHandler(InternalTaskCompView.java:223)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Thanks
Aditi

Hello Aditi,
In AS Java 7.1 and higher you go to short link /nwa and navigate
to Configuration -> Infrastructure -> Java System Properties – Switch to
application tab in second section (Details about <InstanceName>) ->
search for tc~idm~jmx~app.
For 7.0 you have to do that in Visual Admin but I would need to read docu to know where it is too.
But you can find that all in UI installation guide http://service.sap.com/~sapidb/011000358700001233082010E
Regards
Norman

'Unable to check credentials of user. Permission denied...'

Hi everyone, i have this problem when i try to login in a jsp that connects with WCC to check user and password.
oracle.stellent.ridc.protocol.ServiceException: Unable to check credentials of user. Permission denied. Address 'xx.xx.xx.xx' is not an allowable remote socket address.
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:142)
     at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:108)
     at wcc.WccConnection.checkUser(WccConnection.java:597)
The Address 'xx.xx.xx.xx' is a the IP Address of the VM where i mounted the WCC Server.
I can access from another machine to the Control panel of the WCC with http://xx.xxx.xx.xx/cs so it has connectivity.
Somebody said i had to change the file config.cfg in the WCC and add that address to the "SocketHostAddressSecurityFilter" variable, but it still doesnt work.
Anyone has idea about this error?
Thanks a lot!

Check how Incoming Socket Connection Address Security Filter is configured. For more info see http://docs.oracle.com/cd/E23943_01/doc.1111/e14495/config.htm#INECM1695
(don't forget to restart the server after changing the value)

Request Error - The server encountered an error processing the request. The exception message is 'Unable to retrieve the requesting user's identity

I'm trying to create an Orchestrator Connector in Service manager, It is not going well.
The most resent alarm is
<p class="heading1">Request Error</p>
<p>The server encountered an error processing the request. The exception message is 'Unable to retrieve the requesting user's identity.'
For the Orchestrator Web Service URL: I have http://Server_Name:81/Orchestrator2012/Orchestrator.svc/
I created a new Run As account that uses Windows authentication, when I test the connection thats the alarm I get.
Paul Arbogast

Hi,
Can you access the URL using a browser? Does it work with the credentials used for the RunAs account?
Strange error message though - are the account you are running the console with, present in the SCSM CMDB?
Regards
//Anders
Anders Asp | Lumagate | www.lumagate.com | Sweden | My blog: www.scsm.se

Grant privileges to user

hi all,
How to create and grant privileges to user using sql command.
Thanks

Hi,
Example :-
log on as sysdba
grant connect, resource to test identified by test;
test is the user.
Go through this links
http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_8003.htm#SQLRF01503
http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_9013.htm#SQLRF01603
Thanks
Pavan Kumar N

Logon rejected for Unable to obtain Terminal Server User Configuration. Error: Not enough resources are available to complete this operation.

Error: Logon rejected for Unable to obtain Terminal Server User Configuration. Error: Not enough resources are available to complete this operation.
The problem is that the SharePoint server will
function just fine for a week or so and then suddenly when a new user tries
to log on they get an error message indicating that not enough resources areavailable to
log them on and also user will to credential prompt while accessing share point site .
Raj

Hi,
According to the error message, please use performance monitor to diagnose if it is a memory-related bottleneck and you can use the counters of the memory part in the article below:
https://technet.microsoft.com/en-us/magazine/2008.08.pulse.aspx
In addition, it may be due to thousands of open connections to the server are in a TIME_WAIT state. You can run "netstat -an" command on the affected server and client. If you see mutiple connections in the TIME_WAIT state, you can follow the article
to increase the number of TCP/IP connections:
https://msdn.microsoft.com/en-us/library/ee377084(v=bts.70).aspx
Furthermore, if you are running windows server 2003, please make sure that you have installed the KB 948496 and stop all services that you don't need.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

OID-DAS Granting privileges to User

Hi All,
I am using OID to store user information from different organizations. I am using OIDDAS ( Delegated Administrative Services) to enter user information. To incorporate the delegation model I am able to create a user and give him privilege to add other users. I can also give him privilege to grant privilege to other users. However, for security purposes I do not want them to be able to grant or use the 'Allow Oracle Delegated Administration Services configuration' privilege, that appears by default in the window. Is there I can alter this.
Any help on this will be much appreciated.
Thanks

It can be done but is not as trivial as GRANT priv TO user. The disco privs are stored in the EULx_ACCESS_PRIVS table. Theoretically, you would just have to add records there to implement the privileges.
You'll need to look in the EULx_EUL_USERS to get the user IDs, and youd need to find out the application privilege IDs. They are stored in the EULx_ACCESS_PRIVS table, and there are no descriptions. What you would need to do is create a test user, add one privilege, and see what got added to the EULx_ACCESS_PRIVS table. You could then repeat this process for each priv you would want to grant through a script.

Unable to connect to: End User Layer Library - 10.1.2.48.18

Hi, I have a problem about the Discoverer Desktop connection using Application users. I'm working with Discoverer 10g and eBS 11.5.9
So.., all my application users work perfectly when I login with Discoverer Viewer, but when I try to login with Discoverer Desktop (the Oracle application user check box is checked),I have the following behaviour:
unable to connect to: End User Layer Library - 10.1.2.48.18
This happens in production where recently they changed the password of the user APPS.
In which way can I re-login with my previous Application users ?
Is there anywhere a connection with the APPS password and the definition of Application users ?
Thanks in advance
Alessandro

Hi Gianluca, thanks for your reply !
Yes the versions are the same...but the problem is another one...
When I connect with an application user from the Desktop, the connection on the DB is not made with the application user, but always with the user 'APPS' !!
The problem is that on the DB there is a control which automatically kills all the APPS sessions.....so I can't connect with the Desktop on the EUL.....
So, now my question is:
Why does Discoverer Desktop connect to the DB (and consequently to the EUL) with the user APPS, instead to make a connection with the application user I wrote into the initial connection form ???
Somewhere can I modify this behavior ?
Thanks
Alessandro

Unable to GRANT dba to user

Similar Messages

Maybe you are looking for