Patch fails on remote database because execute privilege is not granted to AVDWUSER on SYS.DBMS_LOB in RSA Identity Lifecycle and Governance
4 years ago
Originally Published: 2017-10-25
Article Number
000041056
Applies To
RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.2
 
Issue
While installing an ACM patch to a system with a remote Oracle database, the following error is encountered:
Initialization has failed! Errors found while patching the schema.

In the patch.log:
--------------------------- Dbms_Output Begin --------------------------- 
No permission to grant select on V_APPSUMMARYINFO to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_AVR_ESCALATED_EXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_AVR_EXCEPTIONS_4_OWNR_IN_GRP to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_EXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_NEWEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENIGNOREDEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENINCIDENTEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
No permission to grant select on V_OPENWORKINGEXCEPTIONS to avdwuser 
ORA-01720: grant option does not exist for 'SYS.DBMS_LOB' 
--------------------------- Dbms_Output End ---------------------------
Cause
Oracle database user AVDWUSER needs EXECUTE privilege granted in order to be granted SELECT privilege to views that use functions from SYS.DBMS_LOB.
Workaround
Have your Oracle DBA run either of the following as user SYS:
GRANT EXECUTE ON SYS.DBMS_LOB TO AVDWUSER; 
or 
GRANT EXECUTE ON SYS.DBMS_LOB TO PUBLIC;
Notes
A documentation change has been requested in engineering ticket ACM-80498 for the RSA Identity Governance and Lifecycle Database Setup and Management Guide