Adding windows domain group to ORA_DBA not working in Oracle 12c

oracleoracle-12c

I am running into an odd situation with adding windows domain group to ORA_DBA group to grant sysdba privileges.

I am getting an invalid username/password - logon denied error while connecting to an instance in Oracle 12c.

But, if I add my individual windows account to ORA_DBA group, I am able to login just fine.

I have tried to research for an entire day but haven't had much luck. Any help would be greatly appreciated.

Note : The windows domain group is part of the Administrator group on the server.

This is how my sqlnet.ora file looks like:

SQLNET.AUTHENTICATION_SERVICES = (NTS)
SQLNET.INBOUND_CONNECT_TIMEOUT = 120
NAMES.DIRECTORY_PATH =(TNSNAMES, HOSTNAME)
NAMES.DEFAULT_DOMAIN = WORLD
NAMES.DEFAULT_ZONE = WORLD
TRACE_LEVEL_CLIENT = OFF
AUTOMATIC_IPC = OFF

Best Answer

Most likely you can't.

As part that oracle documentation is clear, you have to be part of the ORA_DBA group to have the sysdba privilege with your Windows account. Being in a subgroup means that you have all the privileges of the parent group without being part of it As the same logic of oracle privileges and roles.

Related Question