sapdba role for SSFS user BRT$ADM is not insufficient

[Former Member]

Hello !

It is not insufficient to grant sapdba role for user BRT$ADM in my system. But if I grant him DBA role - all works fine.

Why it can be? Thanks!

This note says that I should grant sapdba, sysdba, sysoper roles.

1764043 - Support for secure storage in BR*Tools

But only sapdba role is adding to user:

SQL> grant sapdba, sysdba, sysoper to brt$adm;

Grant succeeded.

SQL> select grantee, granted_role, default_role from dba_role_privs where grante = 'BRT$ADM';

GRANTEE                        GRANTED_ROLE                   DEF

------------------------------ ------------------------------ ---

BRT$ADM                        SAPDBA                         YES

There is a BRT$ADM without DBA role:

'SELECT DBOBJ, DOTYP, OBJOW, VWTYP, ACTIV, OBJEC, AEDAT, AMETH, OPTIO, SIGNI, TO

BDO, HISTO, TDDAT, DURAT, PLAND FROM "SAPSR3DB".DBSTATC WHERE (DOTYP IN ('01', '

') AND OBJOW IN ('SAPSR3DB', 'SAPR3', ' ') OR DOTYP >= 'AA' AND DOTYP <= 'ZZ')

AND DBTYP IN ('ORACLE', ' ') AND VWTYP IN ('A', 'O', ' ') ORDER BY DBOBJ, DOTYP,

OBJOW, DBTYP'

ORA-01031: insufficient privileges

[Former Member · Accepted solution]

I fixed it. I should use sapdba_role.sql not only for SAPSR3 but also for SAPSR3DB too.

@sapdba_role.sql SR3

@sapdba_role.sql SR3DB