Bud Durland
asked on
ASA 8 DBA user can't manage users
I have an ASA 8.x server hosted on Win2000. This afternoon I discovered that when I'm logged in as the DBA, I can't make changes to any of my existing users, and I can't create new ones.
The error that I get is
"ASA error -121: you do not have permission to revoke permissions from <username>"
Or something similar. There's no DBA user, but there is a DBA group. Curiously, the DBA group does NOT have the "administer database" box checked in the properties. I tried to connect using my login name -- I belong to a group that is configured to be able to administer the database, and I get the same result.
What's going on?
The error that I get is
"ASA error -121: you do not have permission to revoke permissions from <username>"
Or something similar. There's no DBA user, but there is a DBA group. Curiously, the DBA group does NOT have the "administer database" box checked in the properties. I tried to connect using my login name -- I belong to a group that is configured to be able to administer the database, and I get the same result.
What's going on?
not too sure about ASA, but in ASE you require the sso_role (sso => system security officer)
ASKER
Figured it out on my own -- the "DBA" group had somehow lost the "administer database" priviledge. Fortunately, my assistant's login account had been granted this priv, and so was able to re-assign it to the DBA group.
OK
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.