OraFAQ Forum: RAC & Failsafe » RAC 12c:ORA-01031: insufficient privileges as sys user

Home » Server Options » RAC & Failsafe » RAC 12c:ORA-01031: insufficient privileges as sys user (RAC 12c, DB 11.2.0.4.0, AIX)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

RAC 12c:ORA-01031: insufficient privileges as sys user [message #623950]

Tue, 16 September 2014 09:45

zaff
Messages: 50
Registered: July 2008

Member

Hello all,
I'm having issues executing some "ALTER SYSTEM SET" queries on our RAC database.
I'm logging in as sys: sqlplus as sysdba.

I can run the following command successfully:

Code: [Select all] [Show/ hide]

alter system set REMOTE_OS_ROLES=FALSE scope=spfile sid='*';

However, when I run the following query:

Code: [Select all] [Show/ hide]

alter system set O7_DICTIONARY_ACCESSIBILITY=FALSE scope=spfile sid='*';

.....I get the following error:
ORA-01031: insufficient privileges.

My OS user has been assigned the following groups: "oinstall" "dba" "asmdba".

Any ideas why I get the above error?

Thanks in advance,
Zaff

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623952 is a reply to message #623950]

Tue, 16 September 2014 10:05

Michel Cadot
Messages: 68757
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You must not do this so what is the problem?

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623953 is a reply to message #623952]

Tue, 16 September 2014 10:29

zaff
Messages: 50
Registered: July 2008

Member

Hi Michel - Thanks for the short response/question. I'm assuming when you say "You must not do this" you're referring to

Code: [Select all] [Show/ hide]

alter system set O7_DICTIONARY_ACCESSIBILITY=FALSE scope=spfile sid='*';

? The reason i need to do this is to protect sys objects from users with "SELECT ANY TABLE" privilege etc. However, the point is that I want to be able to do this and I should be able to. The command works in a single node database, but not on RAC.

Would be great if someone can help or provide direction.

Thanks,
Zaff

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623955 is a reply to message #623953]

Tue, 16 September 2014 11:22

Michel Cadot
Messages: 68757
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

he reason i need to do this is to protect sys objects from users with "SELECT ANY TABLE" privilege etc.

The default value is FALSE so you should not have to set its value.

Quote:

The command works in a single node database, but not on RAC.

Try to do it for each database but they may be remove the possibility to change this parameter in 12c.
In this case, if you have it set to TRUE in your database, then just create a pfile from the spfile, then remove the parameter from the pfile and create back the spfil from the pfile.

Report message to a moderator

Re: RAC 12c:ORA-01031: insufficient privileges as sys user [message #623957 is a reply to message #623955]

Tue, 16 September 2014 11:59

zaff
Messages: 50
Registered: July 2008

Member

great! Thanks, Michel.

Regards,
Zaff

Report message to a moderator

Previous Topic:	Oracle 11.2.0.3 RAC - after upgrade cannot start database - TNS protocol error
Next Topic:	RAC 11g new install...newbie question

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sun May 04 09:43:23 CDT 2025