AutoSys Workload Automation

  • 1.  ujoadmin role doesnt exist while granting the roles

    Posted Jul 11, 2018 12:20 PM

    Hi,

     

    While setting up new ORACLE DB for new Autosys instance, we have shared the following prerequisites with DB team,

     

    Database details:

     

    • Oracle 32 bit Full Client on respective AUTOSYS servers.
    • User details and Role / privileges are as follows:
      • Created database user AEDBADMIN USER with password as ************ and The database aedbadmin user must have the following privileges.
    • GRANT CREATE VIEW TO aedbadmin;
    • GRANT 'CONNECT' TO aedbadmin;
    • GRANT 'RESOURCE' TO aedbadmin;
    • GRANT 'SELECT_CATALOG_ROLE' TO aedbadmin;
    • GRANT CREATE PUBLIC SYNONYM TO aedbadmin;
    • The database ujo_admin role must have the following privileges.
      • GRANT ANALYZE ANY TO ujoadmin;
      • GRANT SELECT ON DBA_TABLESPACES TO ujoadmin;
      • GRANT ujoadmin TO aedbadmin;
    • Create database user Autosys with password as **********must have the following privileges.
      • GRANT 'CONNECT' TO autosys;
      • GRANT ujoadmin TO Autosys;

     

    However, as per DBA,

     

    Please do provide the correct details regarding the GRANTS that needs to be provided as we weren't able to find any "ujoadmin" role

     

    Refer to the below details:

     

    SQL> !hostname

    t01ldr00213

     

    SQL> select ROLE from dba_roles where ROLE like '%ujoadmin%';

     

    no rows selected

     

     

    I have gathered the above prerequisites from CA support information. Is there a change in the DB requirements? have I missed anything or mentioned incorrect details. PLease help.



  • 2.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 12, 2018 04:43 AM

    Hi Ankur,

     

    Please review the following DoCops link that cover this subject:

    https://docops.ca.com/ca-workload-automation-ae/11-4-2/en/installing/ae-installation/reintroduce-the-ujoadmin-role-privileges

      

    Reintroduce the ujoadmin Role Privileges

     

    If you install CA Workload Automation AE Release 11.3.6 on an Oracle database and then install Unicenter AutoSys JM r11 on the same database, the MDB is created where the AEDB already existed. This removes the ujoadmin role privileges on the AEDB and results in errors when CA Workload Automation AE Release 11.3.6 tries to access the AEDB. So, you must reintroduce the ujoadmin role privileges to use the database for CA Workload Automation AE Release 11.3.6.

     

    Follow these steps:

    Log in as the SYS user and issue the following commands at the instance command prompt (Windows) or the operating system prompt (UNIX):

    sqlplus SYS/password@Instance as sysdba

    GRANT ANALYZE ANY TO ujoadmin;

    GRANT SELECT ON DBA_TABLESPACES TO ujoadmin;

    GRANT ujoadmin TO aedbadmin;

    GRANT ujoadmin TO autosys;

    The ujoadmin role is granted ANALYZE ANY and SELECT privileges and these privileges are passed on to the aedbadmin user.

     

    Log in as the aedbadmin user and issue the following commands at the instance command prompt (Windows) or the operating system prompt (UNIX):

     

    And give the privileges listed.

     

    I hope this response can help

     

    Thanks and best regards,

     

    Faouzia



  • 3.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 12, 2018 11:33 AM

    Hi Faouzia, 

     

    We are having issues while granting roles and privileges to IDs and getting role and objects doesn't exist. so when i explored more on CA doc - https://docops.ca.com/ca-workload-automation-ae/11-4-2/en/installing/ae-installation/installation-considerations/install…  

    found that there are 2 way to install / configure the objects:

    1. Automatic

    2. Manual.

     

    Since we are doing the fresh DB install for fresh/new autosys envt setup, so we can let everything configured automatically and can follow the automatic configuration steps. right?

     

    Currently our DBAs are facing issues while implementing the following roles/privileges, so we can rollback those permissions/roles from AEDBADMIN & AUTOSYS id and let installer do the configuration automatically. 

     

    i mean does the rollback of roles/permission/privileges is required or not if we are planning to do automatic setup as per above doc link. Please confirm.

     

      • Created database user AEDBADMIN USER with password as ************ and The database aedbadmin user must have the following privileges.
    • GRANT CREATE VIEW TO aedbadmin;
    • GRANT 'CONNECT' TO aedbadmin;
    • GRANT 'RESOURCE' TO aedbadmin;
    • GRANT 'SELECT_CATALOG_ROLE' TO aedbadmin;
    • GRANT CREATE PUBLIC SYNONYM TO aedbadmin;
    • The database ujo_admin role must have the following privileges.
      • GRANT ANALYZE ANY TO ujoadmin;
      • GRANT SELECT ON DBA_TABLESPACES TO ujoadmin;
      • GRANT ujoadmin TO aedbadmin;
    • Create database user Autosys with password as **********must have the following privileges.
      • GRANT 'CONNECT' TO autosys;
      • GRANT ujoadmin TO Autosys;


  • 4.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 14, 2018 11:11 PM

    Hi Ankur,

    Automatic is preferred, if you can. Some shops prefer to have the AEDB pre-built and for them the manual option is available. Anyhow, for your scenario, have your DBA run the /opt/CA/WorkloadAutomationAE/autosys/dbobj/ORA/waae_oracle.sql script (it creates tablespaces, users and roles needed; you may already have some of these created).

    See this thread of details:

    AutoSys AE install failed on ujoadmin user does not exist 

     

    I hope this helps.

     

    Cheers,

    Chandru



  • 5.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 16, 2018 04:35 AM

    Hi

     

    Please Ask your Oracle DBA to run the waae_oracle.sql script under /opt/CA/WorkloadAutomationAE/autosys/dbobj/ORA/  in order to create  users and  roles required

     

    Thanks and regards,

     

    Faouzia



  • 6.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 21, 2018 10:35 PM

    Hi Ankur,

    Can you please mark appropriate response as helpful/correct or let us know if you still need assistance on this?

     

    Thanks,

    Chandru



  • 7.  Re: ujoadmin role doesnt exist while granting the roles

    Posted Jul 30, 2018 05:24 PM

    Hi ankur_shar

     

    Can you let us know if you still need assistance on this or if this is resolved, please mark the appropriate response with the "Mark Correct" for the one that help resolve your question.  If you solved the issues with another method beside what was shared - Can you share that method as future Community user might have the same questions.

     

    Thanks,
    Luu