Patch fails on remote database because execute privilege is not granted to AVDWUSER on SYS.DBMS_LOB in RSA Identity Lifecycle and Governance

4 years ago

Originally Published: 2017-10-25

Article Number

000041056

Applies To

RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.2

Issue

While installing an ACM patch to a system with a remote Oracle database, the following error is encountered:
Initialization has failed! Errors found while patching the schema.

In the patch.log:

--------------------------- Dbms_Output Begin --------------------------- 
No permission to grant select on V_APPSUMMARYINFO to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_AVR_ESCALATED_EXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_AVR_EXCEPTIONS_4_OWNR_IN_GRP to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_EXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_NEWEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENIGNOREDEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENINCIDENTEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENWORKINGEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
--------------------------- Dbms_Output End ---------------------------

Cause

Oracle database user AVDWUSER needs EXECUTE privilege granted in order to be granted SELECT privilege to views that use functions from SYS.DBMS_LOB.

Workaround

Have your Oracle DBA run either of the following as user SYS:

GRANT EXECUTE ON SYS.DBMS_LOB TO AVDWUSER; 
or 
GRANT EXECUTE ON SYS.DBMS_LOB TO PUBLIC;

Notes

A documentation change has been requested in engineering ticket ACM-80498 for the RSA Identity Governance and Lifecycle Database Setup and Management Guide

Don't see what you're looking for?

Related Articles

Trending Articles