Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4847
  • Last Modified:

Ora-01031 Insufficient privileges - SYSTEM USER Oracle 11g

Getting error ora-01031 - Insufficient privileges when creating a new user as SYS or SYSTEM.

Checked dba_user_roles and SYS and SYSTEM user have DBA privileges granted.

Is there a new feature in Oracle 11g that require an explicit privilege granted to SYS or SYSTEM to enable create user command?


1 Solution

Not aware of any changes in 11g for this.  Are you doing this from the command line or from OEM?  If you are going through OEM, I'd try it again from command line and connect / as sysdba to ensure that you're logging in as sys.  

Good luck!
mohammadzahidAuthor Commented:

I tried both OEM, command line as well as using TOAD. Same error message.

I think problem could be something to do with privileges for SYS or SYSTEM schema. Since it is a new database with hardly any data inside, I will drop entire database and create a fresh one :-).

 I will wait few more hours to see if I can get any suggestions from someone else that might help in resolving this error.

DavidSenior Oracle Database AdministratorCommented:
Not connecting as NORMAL, are you?
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

mohammadzahidAuthor Commented:

Hate to erase problem with a quick and easy fix. I dropped and recreated my database since it was local on my laptop. Now I can create a user with SYSTEM and SYS. Hate to throw away a problem without a proper solution.

I will investigate again if occurs again, reopen thread and post solution if found.


mohammadzahidAuthor Commented:
Leaving thread open for couple of days.

if you can restore a backup of your old database  you can check these...

  FROM dba_sys_privs
 WHERE grantee IN ('SYS', 'SYSTEM', 'DBA') AND privilege = 'CREATE USER';

If SYS and SYSTEM have DBA role (and it's enabled) then make sure DBA has the create user privilege
or check if either has it granted directly.

By default.  SYS and DBA should have it,  SYSTEM should have it through the DBA role.
Both SYS and SYSTEM have DBA assigned and default to enabled.

Also check for DDL or CREATE triggers that fire when you create a user.  While SYS might be able to do it,  a trigger may try to do something illegal.

Those are the only reasons that should be able to generate a 1031 exception

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now