Policystore Exception when Using DB as the Policy Store (Doc ID 1348223.1)

Last updated on OCTOBER 01, 2021

Applies to:

Symptoms

After reassociating the policy and credential store with the oracle database the BPM application roles are no longer able to be seeded into the policy store when the SOA instance starts.

Snippet from the server output:

< PolicyStoreException occurred, while granting appRole : BPMOrganizationAdmin to SOAOperator>

exception.70638.type: error
exception.70638.severity: 2
exception.70638.name: Policy Store error.
exception.70638.description: Unable to grant appRole BPMOrganizationAdmin to SOAOperator.

Steps to reproduce:
**********************
1. Verify if the OPSS table was create , else run RCU and create that
2. Create a Datasource for this OPSS table
3. Connect to wlst and Run the reassociateSecurityStore , to change the
PolicyStore from File store to DB

reassociateSecurityStore(domain="your_domain",
datasourcename="your_data_source", servertype="DB_ORACLE",
jpsroot="cn=jpsTestNode",join="false")

4. Login to EM console and verify the settings changed for the Security
Provider Configuration

5. Restart the Server , error message in the logs.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.