Reputation: 306
I can execute the following using DBC, but failed when U used SYSDBA user. I thought I have granted all rights to SYSDBA, but I must missed this one.
CREATE USER "zz_01"
FROM ALL_USERS AS
PASSWORD="s#rMdfdgd1",
PERMANENT = 0,
SPOOL = 0,
TEMPORARY = 0,
COLLATION = HOST,
ACCOUNT = 'sysdba',
NO FALLBACK,
NO BEFORE JOURNAL,
NO AFTER JOURNAL,
TIME ZONE = NULL,
DATEFORM = NULL,
DEFAULT CHARACTER SET LATIN,
DEFAULT ROLE = "SL-TERADATA-TEST",
PROFILE = PROFILE_DEFAULT_ACCOUNT;
*** Failure 5678 The user is not authorized to assign the default role 'SL- TERADATA-TEST'.
Upvotes: 0
Views: 670
Reputation: 60482
You need to add the ADMIN OPTON
:
GRANT "SL-TERADATA-TEST" TO SYSDBA WITH ADMIN OPTION;
Maybe you should allow SYSDBA to create roles, too, then he will automatically get that right for all new roles:
GRANT ROLE TO SYSDBA;
Upvotes: 1