CREATE USER System Privilege Not Being Audited (Doc ID 310876.1)

Last updated on NOVEMBER 06, 2023

Applies to:

Oracle Database Exadata Express Cloud Service - Version N/A and later
Oracle Database Backup Service - Version N/A and later
Oracle Database Cloud Exadata Service - Version N/A and later
Oracle Database Cloud Service - Version N/A and later
Oracle Database - Enterprise Edition - Version 9.2.0.1 to 11.2.0.4 [Release 9.2 to 11.2]
Information in this document applies to any platform.

Symptoms

Auditing the CREATE USER system privilege does not work as expected : it does not audit users who attempt to use CREATE USER without the privilege granted :

SQL> AUDIT create user;

SQL> connect / as sysdba

SQL> create user b identified by XX;

SQL> grant create session to b;

SQL> connect b/XX

SQL> create user c identified by XX;

ERROR at line 1:
ORA-01031: insufficient privileges

SQL> connect / as sysdba

SQL> select username from dba_audit_trail where action_name='CREATE USER' ;

no rows selected