Users Not Granted DVACCTMGR Role Allowed To Manage Other Users In An AV Database (Doc ID 1123624.1)

Last updated on MARCH 28, 2019

Applies to:

Symptoms

After applying  patchset 10.2.3.2 on an  Audit Vault Server environment that uses a RAC database as a repository, SYS is able to manage users via Enterprise Manager DB Console. A new user can be created, an old one can be dropped or the password of any user can be altered. All these operations should fail with ORA-1031 when they are executed  by an user who was not granted the DVACCTMGR role.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.