Why arhivelogs are required for performing FLASHBACK database

Please explain. Thanks.

Documentation says :
It is similar to conventional point in time recovery in its effects, allowing you to return a database to its state at a time in the recent past.
Flashback Database is, however, much faster than point-in-time recovery, because it does not require restoring datafiles from backup and it requires applying fewer changes from the archived redo logs.
It is reason of Flashback require archivelog mode on database.
Regards
Mahir M. Quluzade

Similar Messages

Why is Domain required for an identity in the FIM Service?

I have a scenario where FIM is managing identity, but not all identities have an Active Directory account. I have a flag in the FIM Portal (Service) that indicates if a particular
user is entitled to an AD account or not. My provisioning setup adds or removes the AD account as appropriate. To support FIM Portal activities for those that do have AD accounts, I populate AccountName, Domain, and ObjectSID in the FIM Service from their
corresponding attributes in AD.
What I have noticed is that it does not seem possible to null out or delete the Domain attribute for a user in the FIM Service. I can delete the attributes for both AccountName
and ObjectSID without issues.
When attempting to remove the Domain attribute for a user I get the following in the event logs:
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.Data.SqlClient.SqlException: Procedure or function 'GetDomainConfigurationIdentifiersFromDomain'
expects parameter '@domainName', which was not supplied.
I assume that something internal to the FIM Service is trying to do some magic with validating the domain name and the domain configuration. I did found a post saying, “Yeah,
you have to populate Domain”:
http://social.technet.microsoft.com/Forums/en-US/f207caa9-3a6f-4f2d-8461-a83777280803/fim-service-ma-export-failedmodificationviawebservices-error?forum=ilm2
My question is why is Domain required for a user? It is obviously needed for users that have AD accounts an must authenticate with the Portal, but in the case where a user
does not have an account (and therefore does not have a domain), it feels odd to store the incorrect data for the user. It also looks weird when you bring up list of users in the portal and see domain values for users that do not have accounts. In this particular
case, the client has many domains and does have the Domain and AccountName attributes displayed on the user search results page.

Hi Henry,
Using another domain attribute and workflow to maintain the actual Domain and DomainConfiguration is a good suggestion, thanks.
My original question still stands however... Why is Domain required in the FIM Service?
It is sounding like the answer is "It is not really required on it's own, but there is an internal process that requires it if there is a value for DomainContext set (and there is some magic that sets DomainContext, so you have to manually clear it.)"
Since DomainContext is automatically set when a client writes a value to Domain. I would suggest that it is a bug that DomainContext is not automatically cleared when Domain is cleared.
I poked around a bit and the bug can be fixed by changing the stored procedure definition to allow null parameters. In the FIM Service database the stored procedure [fim].[GetDomainConfigurationIdentifiersFromDomain] has a parameter declaration of "@domainName
NVARCHAR(448)". If this is changed to "@domainName NVARCHAR(448) = null" the problem appears to be solved.
Making this change would of course be totally unsupported, but perhaps it can be included in a future product update.
For now I will use Henry's workaround, or just live with potential out of date Domain data.
Thanks

The permissions granted to user '' are insufficient for performing this operation. (rsAccessDenied)

when I try to connect to the "http://localhost:8080/ReportServer " I get this error.
The permissions granted to user 'DOMAIN/USERNAME' are insufficient for performing this operation. (rsAccessDenied).
I have configered the Reporting services Configuration manager.
I am an administrator on my machine and on the reportserver DB. when I try to log on the my 2008 R2 reporting services I get a simalar error.
does any one have an idea of what I am missing?
thank you.
Jeff
Jeff

Hi There
Please also have a look on this thread
http://tanveeronline.blogspot.co.nz/2011/07/ssrs-2008-r2-unable-to-connect-to.html
http://social.msdn.microsoft.com/Forums/hu-HU/sqlreportingservices/thread/f8a0a3f5-3985-4356-8404-3b408f790747
http://www.networksteve.com/enterprise/topic.php?TopicId=24217
In the last section of this thread it get resolved by
"Changing the ports. Configured TCP port to 9000 and SSL port to 9001.
And then
<Add Key="SecureConnectionLevel" Value="0"/>
Its value was 2, changed it to 0."
Please have alook on this thread that might help you
Many thanks
Syed
http://tanveeronline.blogspot.co.nz/2011/07/ssrs-2008-r2-unable-to-connect-to.html
Does not work. I already had the settings which are mentioned in that blog -
Try doing the following things
Go to Reporting Services Conf. Manager.
1. Change the server account to local account.
2. Remove the SSL if configured.
3. Go to C:\Program Files\Microsoft SQL Server\MSRS10_50.MSSQLSERVER\Reporting Services\ReportServer
4. Change the SecureConnectionLevel value to 0 in rsreportserver.config
Try refreshing the page, it should work now!
Also tried answer at - http://social.msdn.microsoft.com/Forums/sqlserver/en-US/f8a0a3f5-3985-4356-8404-3b408f790747/ssrs-2008-unable-to-connect-to-remote-server?forum=sqlreportingservices
Same thing there. SecureConnectionLevel value to 0 is already set for me.
Third link comment at end says -
Hi Chaitanya, Changing the ports worked for me. Configured TCP port to 9000 and SSL port to 9001. And then <Add Key="SecureConnectionLevel"
Value="0"/> Its value was 2, changed it to 0. Thanks for all your support Best Regards, Arka Mitra.
You can set TCP and SSL like this from Reporting services config manager -
Web Service URL option (left pane) > Advanced settings button > put the values.
The TCP can be changged to 9000, but the SSL requires a certificate file. I am stuck here.
The clue to make your own SSL certificate is here -
http://johnhennesey.blogspot.com/2010/10/reporting-services-2008-over-ssl.html
But, this post is not for windows 7 64 bit, ie my personal pc os. I tried to make the cert on win, 7, but options are complicated. Lets see.
Here is the issue for the same - https://stackoverflow.com/questions/22314341/cannot-see-self-created-certificate-in-certmanager

Data Source Level SRS (SSRS) Issue - Permissions granted to user... are insufficient for performing this operation. (rsAccessDenied)

I've inherited a bit of a security issue and would appreciate any insight.
The bottom line is that I have a user than can run one report from folder "X", but not the report next to it.
Here is the problem context. The names are changed to protect the innocent. Sharepoint is not involved.
The SSRS Home Folder has Security "Group or User" of "DomainX\SSRS_Browsers" with Role(s) "Browser"
"SSRS_Browsers" is an AD group. The user with the issue (DomainX\UnhappyUser) is a member of this group.
The user is able to navigate to folder "X" (one level below Home) and run Report "A" successfully. But, when they try to run report "B", they get:
"An error has occurred during report processing. (rsProcessingAborted) The permissions granted to user "DomainX\UnhappyUser" are insufficient for performing this operation. (rsAccessDenied)
The difference between report "A" that works, and report "B" that doesn't is that report "B" references a data set from a different data source.
Both reports reference DataSource1. The failing report additionally references DataSource2. The SSRS logs confirm this is where the problem is:
ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: , Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DomainX\UnhappyUser' are insufficient for performing this operation.;
processing!ReportServer_0-34!c58!07/16/2014-16:45:41:: e ERROR: An exception has occurred in data set 'DataSource2'. blah blah blah
Both data sources have "stored" credentials with the same AD user: "DomainX\SSRS_Reports". Both data sources reference the same instance of SQL Server. They do have different "Initial Catalog" values. (DatabaseA
and DatabaseB). I can run both reports successfully, but I more authority.
"SSRS_Reports" is defined as a "Login" user under "Security" in SSMS at the instance level. The Server Role is "public".
DatabaseA (which is behind the data source that works) has Security->Users->DomainX\DataBaseA_Readers. This is an AD group, that includes has "SSRS_Reports" as a member.
DataBaseA_readers (in SQL Server, at the DatabaseA level) is a member of role db_datareader.
DataBaseB (which is behind the data source that fails) has Security->Users->DomainX\DataBaseB_Readers. This is also an AD group, that includes "SSRS_Reports" as a member.
DataBaseA_readers (in SQL Server, at the DatabaseB level) is a member of role db_datareader.
Does anyone have any insights as to where my problem may be?
Thank you. Sorry for the verbosity.

Hi Steve,
After testing the issue in my local environment, I can reproduce it. The Home Folder has Security for "DomainX\SSRS_Browsers" group with "Browser" Role, the folder “X” and Report “A” security is inherited from its parent item, but the Report “B” Item security
is not inherited from its parent item. In this way, the DomainX\UnhappyUser has insufficient permission to render the Report “B”.
So, please try to check the Security page of Report “B” and compare it with Report “A” security settings. If possible, we can click “Revert to Parent Security” button to replace all the defined security settings with the security settings of its parent folder
”X”.
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

BODS / SAP : what set-ups are required for communicating with each other ?

Hi.
There is a new SAP system
And there is a new BODS installation.
Both on independent server machines but on the same lan network.
On the test system of BODS. We tried to see how the communication happens with SAP.
While we try some test jobs by trying to pull a simple table on SAP R/3
In Dataflow, we used simple SAPR/3 ABAP flow. And put it into target database thro query transformation.
In the datastore,
We used the Generate and Execute option,
with a path on the local directory of BODS server for creating the ABAP program and the dat file.
However,
We are always getting error on batch job schedule.
Although the user is having rights on the R/3 table
And can login into SAP R/3 system and check the table.
Still we get an error saying Databstore unabel to connect to R/3 system. Check for user login etc.
For anyone whose login we use. We get the error.
However, if i directly generate the code on the ABAP flow (without running the job),
make the program available on R/3 system.
and then run the job as execute preloaded
this works fine without any error.
and we are able to see the data in the target table.
Now both the systems are new.
And am not aware of the initial set-ups which are required for communication between SAP / BODS.
Are WE missing something on the SAP side setups - for generate and execute option to be used?
Is there anything specific to be done for ease of the communication between SAP server and BODS server in this regard.
Can anyone share some inputs on this.
Actually for any user with full admin rights too, on the sap side, if we use the user login for R/3 connectivity for this particular "generate and execute" option, it errors out after nearly 10 minutes. Then the error says, login info not correct.
So basically, the communication channel by itself between SAP R/3 and BODS seems to be locked somewhere.
If anyone with SAP admin expertise - can help or advise on this.
Many thanks
Indu
Edited by: Indumathy Narayanan on Sep 13, 2011 9:20 PM

Getting data out of R/3 requires two distinct setup tasks, and they don't have much to do with each other.
The first basic task is to get the little ABAP extraction programs loaded and run in R/3. You can pre-load them and then call them, or generate, upload, and execute them all on-the-fly, at BODS runtime. During development, use "Generate and Execute" for your ABAP.
Once that's done, you have four different choices to get the data back: "Direct download", "Shared directory", FTP, and "Customer Transfer". Normally, you'll use either FTP or "Shared directory". Refer to the documentation (the BODS SAP Supplement) for a description of all this.
In all cases (or at least, quite certainly, using the FTP and Shared Directory methods), the ABAP extraction programs are directed to plop their output as flat files in the "Working directory on SAP server." For testing, you can look in that folder to see if any flat files are appearing when you submit an ABAP data flow. If not, then either 1) your ABAP program isn't getting in there (a Basis admin should be able to tell you), or 2) it's not running (ditto), or 3) it's running but unable to generate the output file (ditto), because a) SAP isn't permitted to write to that folder, or b) the folder doesn't exist (it needs to be defined from the perspective of the SAP server).
If you do see files appear in the "Working directory on SAP server" when you run a BODS job w/ an ABAP dataflow, then the problem is that BODS can't fetch them. If you're using the "Shared directory" method, which is suitable for and often used in all-Windows environments, then the account under which the Job Server in question is running must have access to the "Working directory on SAP server," but this time from the perspective of the Job Server. So if, for instance, SAP was directed to put the flat files on a local folder, say, "E:\USR\SAP\BODS", then you might want to share this folder out as, for instance,
sapdev1\bods (for an SAP host called "sapdev1"), and then enter "
sapdev1\bods" in the "Application path to shared directory" field, in your SAP datastore configuration. If your Job Server service is logging-in as "Local System," though, it won't be able to get there -- it needs to log-in as an AD domain account w/ rights to that share. Get it? Try logging in to your BODS job server computer with the AD "service account" setup for use by the Job Server service, and try to open a file on the "Application path to shared directory". If you can't, then BODS won't be able to get data from ECC, either. FTP works similarly -- if you're using that and having trouble, please re-post.
Best wishes,
Jeff Prenevost
Data Services Practice Manager
itelligence

What are the essential services that are required for ensuring server is healthy up ?

Hi All,
Please advise me What are the essential services that are required for ensuring server is healthy up ?
Warm regards,
jk1510

The easiest way to find the Health report of server or workstation follow the below steps which is very much easiest way to get it done
There are a few ways to find this in Windows Server 2008.
First click “Start” and type “Generate a system health report”
Or second navigate your way to the Control Panel choose “System and Security” and choose “Generate a system health report”.
The last is to type “Generate a system health report” into the “Search Control Panel” box in the upper right hand corner of the Control Panel window.
Once armed with this data it’s easier to refute or acknowledge an issue is at hand.
BTW if you’re looking for this same thing in Windows 7 it’s there just buried a bit more.
Search Performance in the Start Menu, choose “Performance Information and Tools”, click “Advanced Tools” from the menu on the left, and finally choose “Generate a system
health report”.
Ref: http://blogs.technet.com/b/rmontee/archive/2012/02/23/generate-a-system-health-report.aspx
Exchange Queries

Which sharepoint service applications & services are required for Project server 2013 to work fine.

HI,
Can any one help me,
I am planning to install project server 2013, what are the service applications and Services ( Manage services on server in central admin ) in sharepoint are required for project server 2013 to work fine, so that i will run only service
application and services to increase server performance..i don't want to configure all service applications when i am configuring.
Thanks in Advance..
vijay kommireddi

Hi Vijay,
If you are installing Project Server on SharePoint farm, You need to start the service Project Application Service which would be available after you install project Server 2013.
For Project Server Reporting you need to start Excel service and Secure Store service.
http://technet.microsoft.com/en-us/library/ee662106(v=office.15).aspx
Thanks,
Phani

WHY PGA IS REQUIRED FOR EVERY USER ?

Good Morning Everyone ;
I have a question about PGA.
WHY PGA IS REQUIRED FOR EVERY USER ?
What i got from google ..
Even though the parse information for SQL or PL/SQL may already be available in library cache of shared pool,
the value upon which the user want to execute the select or update statement cannot be shared.
I cant realize it Can anyone show clear example , if possible ?
DB Version is 10.2.0.4.0
OS : oracle linux 5.5
Thanks in advance ..

Thanks aman and heok.
My Question :
Your explanation is clear. I think i am getting little bit confused.
Could you please clarify little more ?
>> session 1 :
user is HR
SQL>select * from tab1 ORDER BY name;
>> session 2 :
user is scott
SQL>select * from tab1 where ORDER BY name;
>> session 3 :
user is USER1
SQL>select * from TAB1 where ORDER BY name;
>> session 4 :
user is USER2
SQL>select * from TAB1 where ORDER BY name;
IS this right aman ?
Already sql statements are avail in SGA ,Even though all above users needs same information.
Oracle does sorting operation in PGA. If PGA exceeds , oracle will use temporary tablespace .
Thanks heok and aman.

Which privileges are required for sql tuning advisor

Hi,
Oracle 10g
1> I want to know which privileges are required for running sql tuning advisor...
2> Some queries are taking long time.. if i run sql tuning advisor..shud i first try it out on development database or directly on prod database
Regards

1> I want to know which privileges are required for running sql tuning advisor...
As SQL tuning advisor relies on the advisor framework, so all tuning task interfaces (XXX_TUNING_TASK) require privilege ADVISOR.
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/d_sqltun.htm#CACDFEBH
Some queries are taking long time.. if i run sql tuning advisor..shud i first try it out on development database or directly on prod databaseDo you mean the implementation?
Adith

Why we are going for OOALV insted of function modules ?

Why we are going for OOALV insted of function modules. ?
Its very easy to use function modules directly compared to OOALV.
IS there any particular reasons or any advantanges of using ooalv
Thanks & regards,
hari priya

Hi
a) from abap coding point of view,
alv list is done with Function modules,
alv gris can also be done with FM,
but can also be done using OO concepts.
b) Alv grid (using oo concept) requires
designing the screen layout .
Hence, in one screen, we can show more
then one alv grid
(we cannot show more than
one alv list on one screen)
c) ALV grid uses ActiveX controls
present on the Presentation Server.
Hence, it consumes More Memory
on the presentation server.
d) ALV LIST is Display Only.
Whereas
ALV Grid Can Be made EDITABLE for entry purpose.
e) In alv grid, these options are possible,
but not in alv list.
without horizontal lines
without vertical lines
without cell merging during sorts
display total lines above the entries
ALV LIST Can be coded using only FMs
ALV GRID Can be coded using FMs and object oriented concepts
ALV LIST Can be displayed hieraicharlly
ALV GRID cannot be displayed hierarichally
<b>Reward if usefull</b>

What settings are required for DP_PROC_TY,CT_PROC_TY,TEND_TYPE

hai friends
what settings are required for DP_PROC_TY,CT_PROC_TY,TEND_TYPE
Thanks a lot
Regards
VinayKrishna

Hi Vinay,
1. For DP_PROC_TY you need to give the transaction type or R/3 document type you want to use for creating direct material POs. Could be ECDP given in the standard or copy of which you might have created.
2. For CT_PROC_TY it is either PCTR or GCTR depending what you want to create local contract or GOA.
3. TEND_TYPE can have BID, RFCR etc depending on what type of bid invitaion you want to create form sourcing cockpit or as follow on bid invitaion.
Ragards,
RRK.
Do reward points for useful answers
Edited by: Ramakrishna Rallapalli on Jun 16, 2008 9:06 AM
Edited by: Ramakrishna Rallapalli on Jun 16, 2008 9:06 AM

SSRS 2012: The permissions granted to user '' are insufficient for performing this operation. (rsAccessDenied)

Hello
Can you please help me with this error that I'm getting with SSRS 2012. I've searched the forums and I can only find solutions for SQL Server 2008 and not 2012.
When I try to go to the url on our server
http://server:port/ReportServer, I get the following error.
"The permissions granted to user 'WW004\z0008x5e' are insufficient for performing this operation. (rsAccessDenied)".
Can you please help me troubleshoot this. I have not been able to find a solution.
Andy

Hi AndyMcV,
According to your description, when you try to go to the URL
http://server:port/ReportServer, the error occurred: The permissions granted to user 'WW004\z0008x5e' are insufficient for performing this operation. In fact, reporting Services uses role-based security to grant user access to a report server, and there
are two types of roles: Item-level roles and System-level roles. On a new installation, only local administrators have access to a report server. In order to grant access to visit the URL
http://server:port/ReportServer to users, a local administrator must create a role assignment to define the tasks a user can perform. To workaround this issue, please refer to the following steps:
Start Report Manager by going to URL
http://server:port/ReportServer.
Click Site Settings at the top right of the page.
Click Security in the left pane.
If a role assignment already exists for the user, click Edit.
Otherwise, click New Role Assignment. In user, enter the user account.
Select appropriate access, and then click Apply.
Besides, if the user need to have access to reports, folders, models and shared data sources, we can assign Item-level roles on the root node (the Home folder) or on specific folders or items.
For more information about Role Assignments, please refer to the following article:
http://technet.microsoft.com/en-us/library/aa337471(v=SQL.105).aspx
If you have any questions, please feel free to let me know.
Thanks,
Wendy Fu

The permission granted to user "Domain\user" are insufficient for performing this operation(rsAccessDenied)

Hello All,
I believe this is a very frequently-asked question in SSRS, maybe the more famous one. For many times, I solved it for others.
But today, I spent one afternoon on this issue, unresolved.
My environment: SSRS 2008R2, DB in local default instance(SQL2008 R2)
My windows account and one of my service accounts(launching my SSRS) are both in local admin group.
After configuring the SSRS, in local server, open IE(run as administrator, using my domain service account) to access "http://localhost/reports". It pops this error:
The permissions granted to user 'Doamin\myServiceAccount' are insufficient for performing this operation. (rsAccessDenied)Get Online Help
Going back to my desktop, Open IE using my windows account to access "http://servername/reports", seeing the the same error and saying my windows account doesn't have sufficient permission on that server
On Server side, use SSMS to connect local report service, and try to check who is in "system administrator" in SSRS instance, it pops up the error as below,
The permissions granted to user '' are insufficient for performing this operation. (rsAccessDenied) (Reporting Services SOAP Proxy Source)
If using IE to reach "http://localhost/reportserver"(Web Service page), both my windows account and service account work--it doesn't complain anything.
Checked all things I know, still seeing this error. Notice my windows account and my service account are both in local admin group.
Anyone can share some thoughts on this?
Derek

Figured out finally.
In rsreportserver, we put in our custom code of security control as below.
<Security>
<Extension Name="Windows"Type="Microsoft.ReportingServices.Authorization.WindowsAuthorization,
Microsoft.ReportingServices.Authorization"/>
                  
            </Security>
When I flipped it back to native mode, it works.
Thanks all your replies.
Derek

The permissions granted to user '' are insufficient for performing this operation._

We have just installed a new instance of ss2012 on windows server (2008r2), both myself and another BA are in the server administrator group and can create projects and reports. But when we try to deploy we get this error..
The permissions granted to user 'Domain\Username' are insufficient for performing this operation.

Hi ghw123,
According to your description, you can't deploy report onto report server, even the current user is the local server administrator. Right?
In this scenario, since you are the system administrator of Reporting Services, you supposed to be assigned Content Manager role already. Please go to SQL Server Management Studio, connect Reporting Services, go to Security->Roles->Content Manager,
check if this item level role has permission for all tasks.
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

"The permissions granted to user 'domain\username' are insufficient for performing this operation. (rsAccessDenied)

HI,
I am working on SharePoint 2013 and using Report Viewer webpart (imported from RSWebpart.cab file from SQL server 2008 R2) for showing SSRS reports. I have added Report Viewer webpart in page and done all configuration related to it like set Report
Manager Url and Report Path in the webpart properties. But when i browse that page it is giving the below error -
The permissions granted to user 'domain\username' are insufficient for performing this operation. (rsAccessDenied)"
But when i run IE as 'Run as Administrator' and open the same page which contains the Report Viewer webpart, now i am able to view the report on the page and the error gone away.
I am not sure what is happening here, what can be the reason for such unpredicable behaviour and what can be the work around for this. Every user can't open the IE in 'Run as Administrator' mode. So what can be the possible solution for this.
Thanks in advance for the help!

Solved. In IE I went to the RS Home page, selected Detail View, put a check in front of every folder, went to Folder Settings and then added my domain user as a Browser in New Role Assignment. Reports work fine now.
André

Why arhivelogs are required for performing FLASHBACK database

Similar Messages

Maybe you are looking for