Hi,

When I try to run reports using Report Viewer, I get the
message "ORA-00942: table or view does not exist or insufficient
privileges to access."
I can however view reports if I were logged on as SYS, but I
now need for users to log on as themselves to run these reports.

I am using DB Audit to audit an Oracle 9i database.

I have tried granting privileges to db_audit.data_audit_trail and
to db_audit.data_audit_columns, as well as to the other
tables specified in the documentation, but it still
does not work.

Can you indicate what are all the privileges required to be granted
for a user to view reports using Report Viewer?

Thanks,
Liana

Which report are you trying to run?

: Hi,

: When I try to run reports using Report Viewer, I get the
: message "ORA-00942: table or view does not exist or insufficient
: privileges to access."
: I can however view reports if I were logged on as SYS, but I
: now need for users to log on as themselves to run these reports.

: I am using DB Audit to audit an Oracle 9i database.

: I have tried granting privileges to db_audit.data_audit_trail and
: to db_audit.data_audit_columns, as well as to the other
: tables specified in the documentation, but it still
: does not work.

: Can you indicate what are all the privileges required to be granted
: for a user to view reports using Report Viewer?

: Thanks,
: Liana

Hi,

I am trying to run "Logon/Logoff and Resource Usage Audit."
But I get the "insufficient privileges" error for all reports
listed under the sections "System Audit Trail", "Compliance Reports" and
"Data Change Audit Trail"

Thanks,
Liana

: Which report are you trying to run?

These are system-audit reports. The required permissions vary for different database systems. For example in Oracle anyone who needs access to these reports must have SELECT privilege on SYS.DBA_AUDIT_TRAIL and other SYS.DBA_AUDIT_xxx system views.
In SQL Server and DB2 they must have SELECT privileges for DB_AUDIT.SYS_AUDIT_TRAIL tables, in addition in SQL Server they must be valid users in the database where audit repository is stored. In ASE they need SELECT permissions for DBO.AUDIT_xxx system tables in sybsecurity database.

: Hi,

: I am trying to run "Logon/Logoff and Resource Usage Audit."
: But I get the "insufficient privileges" error for all reports
: listed under the sections "System Audit Trail", "Compliance
: Reports" and
: "Data Change Audit Trail"

: Thanks,
: Liana

Thanks, your suggestion worked. Now I am able to run both
system-audit reports and data-audit reports.

However, I still get the error if I run the Compliance Reports...
specifically :
- Inactive Users With Active Accounts
- Users With Expired Passwords
- Users With Non-Expiring Passwords
- Users Having Administrative Privileges
- Recent Administrator Logins
- Recent Privileged Operations

Thanks,
Liana

: These are system-audit reports. The required permissions vary for different
: database systems. For example in Oracle anyone who needs access to these
: reports must have SELECT privilege on SYS.DBA_AUDIT_TRAIL and other
: SYS.DBA_AUDIT_xxx system views.
: In SQL Server and DB2 they must have SELECT privileges for
: DB_AUDIT.SYS_AUDIT_TRAIL tables, in addition in SQL Server they must be
: valid users in the database where audit repository is stored. In ASE they
: need SELECT permissions for DBO.AUDIT_xxx system tables in sybsecurity
: database.

I am not sure which database system you are auditing. If you are working with Oracle, give them SELECT on DBA_USERS system view, in SQL Server they would need SELECT for sysusers

: Thanks, your suggestion worked. Now I am able to run both
: system-audit reports and data-audit reports.

: However, I still get the error if I run the Compliance Reports...
: specifically : - Inactive Users With Active Accounts
: - Users With Expired Passwords
: - Users With Non-Expiring Passwords
: - Users Having Administrative Privileges
: - Recent Administrator Logins
: - Recent Privileged Operations

: Thanks,
: Liana

Hi,

I am using Oracle 9i database.
Granting SELECT on DBA_USERS system view only allows me to run
'Inactive Users With Active Accounts' Compliance Report.

However, I still get the error if I run the other Compliance Reports...
specifically :
- Users With Expired Passwords
- Users With Non-Expiring Passwords
- Users Having Administrative Privileges
- Recent Administrator Logins

Thanks,
Liana

: I am not sure which database system you are auditing. If you are working with
: Oracle, give them SELECT on DBA_USERS system view, in SQL Server they
: would need SELECT for sysusers

You may also need access to DBA_ROLE_PRIVS and DBA_SYS_PRIVS views.

: Hi,

: I am using Oracle 9i database.
: Granting SELECT on DBA_USERS system view only allows me to run
: 'Inactive Users With Active Accounts' Compliance Report.

: However, I still get the error if I run the other Compliance Reports...
: specifically : - Users With Expired Passwords
: - Users With Non-Expiring Passwords
: - Users Having Administrative Privileges
: - Recent Administrator Logins

: Thanks,
: Liana

OK, this works for all except the following 2 compliance reports:

- Users With Expired Passwords
- Users With Non-Expiring Passwords

Liana

: You may also need access to DBA_ROLE_PRIVS and DBA_SYS_PRIVS views.

I ran an audit for the report processing and found it looking for DBA_PROFILES view. So you would need to give your users SELECT permissions for that view too. Hope this helps.

: OK, this works for all except the following 2 compliance reports: - Users
: With Expired Passwords
: - Users With Non-Expiring Passwords

: Liana

This worked!

Thank you for all your help and for the prompt responses.

Liana

: I ran an audit for the report processing and found it looking for
: DBA_PROFILES view. So you would need to give your users SELECT permissions
: for that view too. Hope this helps.