The Application Owner account (IFSAPP/IFSSYS) can't change other users' database passwords, failing with 'IFS Application Owner must have System privilege "ALTER USER" to execute this method' — even though every user-management permission/grant has already been checked. What's missing?

Q: The Application Owner account (IFSAPP/IFSSYS) can't change other users' database passwords, failing with 'IFS Application Owner must have System privilege "ALTER USER" to execute this method' — even though every user-management permission/grant has already been checked. What's missing?

Run the following as a one-time database-level grant: BEGIN Prepare_SYS.Dbagrant(' ', 'Y'); END; — this grants the Application Owner account the underlying Oracle ALTER USER system privilege, which is a database-level privilege separate from anything configured through IFS permission sets or user-management grants. After running it, refresh the Security Cache through the application's Refresh Cache window — and remember to refresh Security Cache again after any future change to user permission sets or grants, not just this one.

Answer

Run the following as a one-time database-level grant: BEGIN Prepare_SYS.Dbagrant('<Application Owner>', 'Y'); END; — this grants the Application Owner account the underlying Oracle ALTER USER system privilege, which is a database-level privilege separate from anything configured through IFS permission sets or user-management grants. After running it, refresh the Security Cache through the application's Refresh Cache window — and remember to refresh Security Cache again after any future change to user permission sets or grants, not just this one.

← Browse Security and access questions