User with admin priviliges

Hi,
I have a user created from EM.
However, this user have limited priviliges (cannot create a table, cannot create within a tablespace).
How to create a user with DBA priviliges?
thx

Hi.
You do this by granting the DBA role to them.
SQL> GRANT DBA TO user;
Remember, DBA is a very powerful role. Only grant it if you are sure it is necessary, otherwise it is a massive security blunder.
Cheers
Tim...

Similar Messages

Additional User with admin rights

Hi all,
i checked the documentation but i could not found a possibility to create an additional user with admin rights to access the Vibe Management Console.
Does anybody know if this is possible and how to do this?
Thanks in advance
Alex

Hi Willem,
thank you for the great post. It did the job very well.
Alex
>>> <[email protected]> schrieb am 1.8.2013 um 07:46 AM:
> arlorenz;2275156 Wrote:
>> Hi all,
>>
>> i checked the documentation but i could not found a possibility to
>> create an additional user with admin rights to access the Vibe
>> Management Console.
>> Does anybody know if this is possible and how to do this?
>>
>> Thanks in advance
>>
>> Alex
>
> Hey Alex,
>
> Yes, that's possible. It's somewhat a twofold/threefold process, as
> you have to give an accounts right to administer the zone, and then also
> have to give that account rights to the personal workspace root (to be
> able create/delete user accounts) and any workspaces that need to be
> administered.
>
> I always create an vibe-admins group (local group) that gets the rights
> to the zone and workspace roots. Then add the needed users to that
> group.
>
> Access for the zone can be set within the administration console:
> https://www.novell.com/documentation...ata/bk4saug.ht
> ml
>
> Then add the needed rights on the workspace roots, Global, personal &
> team workspaces.
>
>
> !Do note that admin is the only user that is not allowed to get
> blocked. Other admin users can be filtered out via ACL's.
>
>
> Cheers,
> Willem

How to add user with admin priviledges to multiple machines

Hi all,
I would like to be able to create a local ARD user on each machine on the network, with admin privileges on the machine. Is this possible?
The custom client installer seems to only allow adding standard users. Is there away I can create a Unix command that I could send to each machine, to add an administrator user? Your advice would be greatly appreciated.

Since machines ship with ARD 2 already installed, rather than go through the hassle of creating a Client package and having to edit that, you can simply run a shell script to take care of everything.
We utilze a BASH script to create the ARD user, set the password of the user, hide it in the login window, add the user to the sudoers file (just to make sure the user can sudo), and add the path to kickstart to the PATH variable in the default .profile (/etc/profile) so that you can use kickstart without having to type the entire path.
Script follows:
#!/bin/bash
# add kickstart to path
echo "PATH="\"/bin:/sbin:/usr/bin:/usr/sbin:/System/Library/CoreServices/RemoteManag ement/ARDAgent.app/Contents/Resources:/Developer/Tools"\"" >> /etc/profile
export path
# add ARD user
niutil -create . /users/arduser
niutil -createprop . /users/arduser gid 499
niutil -createprop . /users/arduser uid 499
niutil -createprop . /users/arduser shell /bin/bash
niutil -createprop . /users/arduser home /private/var
niutil -createprop . /users/arduser realname ard
niutil -createprop . /users/arduser shadowpasswd
niutil -appendprop . /groups/admin users arduser
# now set the passwd for the ard user
dscl . -passwd /Users/arduser ardpass
# now add to the sudoers file
echo "arduser ALL=(ALL) ALL" >> /etc/sudoers
# now hide the ARD user from the loginwindow process
mkdir /var/temp/
cp /Library/Preferences/com.apple.loginwindow.plist /var/temp/com.apple.loginwindow.bak
defaults write /Library/Preferences/com.apple.loginwindow HiddenUsersList -array-add arduser
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -users arduser -access -on -privs -all
exit 0
Just copy that into a text file, chmod it to 755 and you can then run it on the machine. We will put it at the root of the hard drive, run it, and then remove it. If you want the script to delete itself, just put the following before "exit 0":
rm $0
That will delete the file.
Hope that helps out.
Steve
XServe G5, XServe RAID (1TB), MacBook Pro Mac OS X (10.4.6)

User with admin rights can't access files through the command prompt

I have a strange situation where I have 2 users both setup exactly the same with admin rights on a 2003 (32 bit) server through an AD group membership, but one can do everything as expected but the other can't.
The one that can't is trying to execute a program is a command prompt and keeps getting access denied or invalid directory when trying to cd into the folder. I double and tripled check the permissions and they are correct, this person should have
full admin. In fact I did a effective permissions through explorer and it states full rights. Along those lines this person can also access the folder in question through explorer just not a command prompt.
Has anyone seen this before ? and if so what can be done about it.
Thanks

Hi,
Can the user execute the program through explorer? In Windows Server 2003, the Users group does not have Read and Execute permissions to the command processor (Cmd.exe).
You could refer to the article below to resolve the issue:
"Access is denied" error message when you run a batch job on a Windows Server 2003-based computer
http://support.microsoft.com/kb/867466
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Users with Admin Rights

I've been looking through the Admin Ref Manual and Admin Guide (9.0.42) to see if there is a way to list the users that have been given Administrative rights on any given node within the node network on our server. I thought I remember seeing this documented somewhere but now I can't find it.
Does anyone know if it's possible and if so where is it documented?
Thanks in advance for you words of wisdom! :)
-Gail

In the BASIC web browser login popup there is a read-only field called
"Realm". This is what is specified in the tab. It is merely there for
informational purposes for the user logging in.
Neil Smithline
WLS Security Architect
BEA Systems
"veena" <[email protected]> wrote in message
news:3ae5ab86$[email protected]..
does weblogic support different security domains for different web
applications ? if not, what is the purpose of the Auth Realm Field in the
Other Tab when installing a web application ?
Veena.
"Neil Smithline" <[email protected]> wrote in message
news:3ae563d4$[email protected]..
This is not possible in current WLS releases. Each "administrativedomain"
(referred to simply as a "domain" in WLS doc) corresponds to one andexactly
one "security domain". Users have the same permissions throughout the
domain.
We are currently considering various options for how to support this inthe
future.
Neil Smithline
WLS Security Architect
BEA Systems
"Nick Roberts" <[email protected]> wrote in message
news:[email protected]..
Can anyone provide information about how to have different users
have admin rights to different servers in a domain ?
Is there any documentation on the different resources defined in
the ACLs list of the default server ?
Nick

Second user with admin, but blocked copying from hard drive

I noticed today that my new iTunes will not drag and drop songs into playlists. I can do it if I right click on highlighted songs, right click and select the appropriate playlist. Its a pain doing this and not too intuitive as just drag and drop. I searched and found many people have this issue.
I also realized that can't copy anything from my external drive (iTunes library is also located here) I press command I and realized its locked and after entering password the lock is open. However I still cannot copy songs out of the drive. What the **** is happening? I have used iTunes for over 6 years now and never had this problem. Can someone let me know how I can unlock the external hard drive?
Just to let you know this laptop is originally installed by my wife with her user. I added my own later so we both have admin access. So not sure why this is happening.
Cheers for all advice.
Thanks

I used my own account to start copying all my songs onto this MBP. I need this for my djing, so it helps if I can custom my playlists and organize my music.
I could try deleting the other user but not sure how to do this.
I am not getting any error messages. I can drag songs but when I put them in the playlist folder or out onto the desktop, the highlighted songs bounce back to its original position. No "+" signs either.
I have the same setup on another mac with the same iTunes latest version. This is the first time its happened to me after many years of using iTunes.

Directory service : find user with admin rights

Hi,
I'm just taking over an existing LPAD server and i need to know which user on the directory has admins rights.
I'm playing around with ldapsearch, but i'm not able to get the right search string.
Os is Solaris 10 5/09 s10s_u7wos_08 SPARC.
Any thoughts ?
Thanks,

Hi,
Can the user execute the program through explorer? In Windows Server 2003, the Users group does not have Read and Execute permissions to the command processor (Cmd.exe).
You could refer to the article below to resolve the issue:
"Access is denied" error message when you run a batch job on a Windows Server 2003-based computer
http://support.microsoft.com/kb/867466
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

File sharing only works for users with Admin rights

Hi.
I am trying to set up file sharing in Lion Server but am having problems getting all my users access to shared folders. So far, only users that are "allowed to administer this server" are seeing shared files, even though they seem to have "read/write" permissions.
Can anybody tell me what I might be missing?
Is being allowed to "administer" the server different than truly being an Admin?
I want to allow users to read and write files, but not change any server settings.
Any suggestions would be appreciated.
Thanks!

What permissions are you setting on the share? My guess is you are only using user, group, and other (POSIX). You need to add an ACL to the list and then set read/write or full control.

Only users with admin privileges can connect to shares

i have set up a 10.6.4 server but only admin users can see the shares.
other users can connect but no shares appear. (their connection appears in the log and on 10.3.9 you get a blank list of shares available)
i do have the users set via POSIX as the group owner (all users are in the assigned group).
i have propogated the permissions as well.
i did alter the access pane to make it so all could use AFP.
i tried making it restricted and adding all groups and users to no avail.
i feel it's something pretty silly i'm missing.
any advice would be appreciated.

bzzzz wrote:
i have set up a 10.6.4 server but only admin users can see the shares.
other users can connect but no shares appear. (their connection appears in the log and on 10.3.9 you get a blank list of shares available)
i do have the users set via POSIX as the group owner (all users are in the assigned group).
i have propogated the permissions as well.
i did alter the access pane to make it so all could use AFP.
i tried making it restricted and adding all groups and users to no avail.
i feel it's something pretty silly i'm missing.
any advice would be appreciated.
Two possibilities spring to mind -
1. The Service security settings may not allow users to connect, look in Server Admin, click on the Access icon at the top, check the security settings for the AFP service.
2. ACLs (Access Control Lists) override the POSIX security settings, and Leopard and Snow Leopard much prefer using ACLs (Tiger like POSIX better). If no ACLs are defined for a directory then the POSIX permissions apply.

ACE and ANM RBAC - Single user with Admin access

Goodday,
I would like to confirm if one can only assign a single user Admin access to a context via RBAC (either on ANM or ACE native RBAC through ACS). So is this true or not?
If so, would I be correct in assuming this excludes the default Admin user.
Also, what do you do if you need to provide Admin access to more that one user? Can it be done?
Thanks
Paul

Actually multiple users can assinged to the pre-defined ADMIN role in ACE RBAC such as the following:
myaceisnamedthis/Admin(config)# username Bob password weakpass role Admin domain default-domain
This is also true in ANM, where the user's RBAC is a cross product of the ANM defined role and domains (which is at the ANM level so that it can span multiple ACE devices and contexts).
In both cases, the AAA can be used for authentication, though authorization is performed by ACE/ANM themselves.
Cheers,
David K.

Create user with select privilege only one schema

can someone tell me how i can create user with select priviliges only one schema.
i don't want the user to have any select privileges with other schema.
can someone advise me.
Thansk

In general, you would do something like
CREATE ROLE abc_read_only;
FOR x IN (SELECT * FROM dba_tables WHERE owner='ABC')
LOOP
EXECUTE IMMEDIATE 'GRANT SELECT ON abc.' || x.table_name || ' TO abc_read_only';
END LOOP;
CREATE USER your_user ...;
GRANT abc_read_only TO your_userYou create a role, grant the role SELECT access to all the tables in the ABC schema (you can extend this to grant access to views, functions, etc depending on the requirements), and then grant that role to your user.
Justin

Creating users for admin console access

When I install the web server onto my system part of the installation is to create an admin user and password. I'd like to create another user to log into the web server admin console with the same or limited permissions. I don't want to have to hand out the 'admin' password to multiple people, I'd prefer to create new accounts for each person that needs to administer some part of the webserver and set permissions for each. Can't seem to find out how this is done in the admin guide.

"Andy" <[email protected]> wrote in message
news:[email protected]..
Hello,
I am using a custom authentication and authorization providers that
work just fine with my applications, but i have problems using Admin
Console with them (WL Server 7.0). The server is successfully started
with a user that has been given rights to '<svr>.myserver.boot' etc.
Logging into Console is successful as well and most Console pages can
be viewed as usual. But when i'm trying to save any changes, or if i
try to just view certain Console pages, i get
'weblogic.management.NoAccessRuntimeException'. For example:
MBean operations need a user with Admin role.

Change postalsoft user to admin rights

How do we enable a current Postalsoft user with admin rights? Currently, she doesn't have upgrade rights, some print options are greyed out... The originally installed Postalsoft is under a ex employee logon.
Is there a simple way to change over the rights?
Appreciate any help with this. Thanks. jb

JB,
It still sounds like there is a permission issue. Some settings are stored in the registry, and some of the printing options are stored in the Windows Printers folder. So when you say that they have Read/Write Administrative rights are you sure that all the folders were changed? As for the Presort options being gray it could be that the database is set to Read Only. To check that you can open a job and go to File > Properties > Document. Click on the Database Permissions tab. Make sure that Other's Rights are set to None and Your Rights are set to Read/Write. If this does not fix it please log a message for us in Support.
Below are the steps to log a message for support -
1. Go to http://service.sap.com/bosap-support.
2. Click on "Create a message / Contact technical support".
3. Under System Search, click the drop down arrow next to your installation and choose your system, and click Search and then click on the BOB link.
4. When creating a SAP message it is required to search for Notes. (Knowledge Base articles) to see if you can find an answer to your question without having to log the message for support. In the Search Terms area, type your question and click Continue.
5. If you do not see any Notes pertaining to your question click on Create Message.
6. Choose the correct Component for the product you are creating the message for. The component is the support Q that your call will go into so the correct team can assist you. To do this click on the icon next to the icon next to the Component window to see a drop down list.
7. Click the arrow by BOJ-EIM to see a more detailed list. By each component the names of the u201Cproductsu201D you are using are listed. Choosing the correct component will get your Message logged for the correct support team.
For example:
a. BOJ-EIM-COR is used for ACE, DataRight IQ, Match/Consolidate, IACE, and FirstPrep products.
b. BOJ-EIM-COM is used for DeskTop Mailer, Business Edition, Presort, PrintForm, Label Studio
c. BOJ-EIM-DEP is used for DQXI, Data Insight, eDQ Infa, SAP Siebel, PSFT, Oracle, Rapid Library
8. After choosing the component, fill in any remaining required/optional items. **Required fields under Problem Details are flagged with a red asterisk.
u2022 In the Short Text box, enter a brief description of the question or issue.
u2022 In the Long Text box, you can go into further detail about what you are seeing or questioning.
u2022 click Send Message.
Thanks,
Melissa

Impossible to set up a TC with admin and users privileges

Hi,
Sorry for my english first. I'm not an english speaker...
That's one week I'm playing with my Tc to try to set it up with admin and users privileges and and doesn't succeed to find a good way to do it....
What I want to do: set up my Tc so that I'm an admin and can do whatever I want in the folders of each user. I want the user to have access to one folder with their name. Let's say I would like to user my TC like a usual network drive or NAS.
What I discover: if I enable file sharing with accounts on my TC and define two users user1 and user2 with Read write privileges, user1 can see a folder user1 and put whatever he wants in it and there's a share folder for user1 and user2. BUT I cannot be admin on the TC when account filesharing is on. It means I cannot put anything in user1 folder beacuse I don't see user1 folder. It is just like if you have user accounts on TC you can just change the privileges but not defined an administrator. I'm able to see user1 folder for instance solely changing the filesharing back to secure shared disks "with time capsule password". If i do so I can see all the folders on the TC.
But it's very annoying because it means that each time I want to put a file inside the folder of one of my user, I have to restart my TC "with time capsule password", put the file, set it up back to user account and restart again the TC.... Not really practical!
Anyone got an idea how to use the Tc with user accounts (one admin and others users...)

I forgot to mention that I tried also another method: giving guest access to TC to my two users but there are several problems here: first they can only read (if not they would have the same privileges as me) what means they can put any document in the TC. Second, they see all the folders on the TC and the idea is that they can only see the shared one....

OID users ( EUS) problem with grant create table with admin

Hi,
We activated enterprise users in the OID.
There is a role APP_ADMIN that has the following grants:
create user
drop user
create table with admin option
this is for an application that creates BI schemas, so it needs to be able to create other users.
I have granted these to a local role, and the user has access to the local role, thanks to the OID setup.
The create and drop user work.
however, the grant create table to another user does not work.
Is there an issue with 'with admin option' grants in Enterprise user security?
Regards,
Peter

If I grant
grant create table to test_role with admin option;
it does not work
if I grant
GRANT GRANT ANY PRIVILEGE to test_role WITH ADMIN OPTION;
it does work.
The test command as user with test_role is:
grant create table to test_usr;
very strange!
If the user is a standard user and I create role test_role
and grant create table to test_role with admin option it works.
but if I convert the user to an EUS user and the same privilege is given to the role ( role is granted to a global role to an enterprise role)
it doesnt work
Edited by: Peter on Dec 7, 2012 2:36 PM

User with admin priviliges

Similar Messages

Maybe you are looking for