ADJRIINITPASSWD ORA-01031 Error in Oracle E-Business Suite

ADJRIINITPASSWD.sql ORA-01031 Error in Oracle E-Business Suite

When running ADJRIINITPASSWD.sql, you may encounter an ORA-01031: insufficient privileges error. This typically occurs when Oracle EBS is unable to retrieve password information from the database vault due to missing grants or context definitions.

Below is the complete error and the steps to resolve it.

During execution, you may see the following error:

Error: Unable to execute statement <

Begin
ad_jar.get_jripasswords(:l_storepass, :l_keypass);
End;

> len = 63

AD Administration error:
ORA-01031: insufficient privileges
ORA-06512: at “SYS.DBMS_SESSION”, line 94
ORA-06512: at “APPS.AD_JAR”, line 17
ORA-06512: at line 3

AD Administration error:
Unable to get passwords from Vault

This indicates that the APPS user or associated roles do not have the required privileges to access password data through AD_JAR.

Root Cause

The AD_JAR package requires proper context initialization and access to the view DBA_USERS_WITH_DEFPWD.
If these privileges are missing, the password retrieval process fails with ORA-01031.

Solution

Follow the steps below to restore required context and grant appropriate privileges.

1. Connect as APPS and Create the AD_JAR Context

[applmgr@oracle ~]$ sqlplus apps/******

SQL> create or replace context AD_JAR using AD_JAR;

Context created.

2. Connect as SYS and Grant Access to SYSTEM

[ora@oracle ~]$ sqlplus sys as sysdba

SQL> GRANT select on DBA_USERS_WITH_DEFPWD to SYSTEM with grant option;

Grant succeeded.

3. Connect as SYSTEM and Grant Access to em_oam_monitor_role

SQL> conn system/******

Connected.

SQL> GRANT select on DBA_USERS_WITH_DEFPWD to em_oam_monitor_role;

Grant succeeded.

4. Re-Test the Execution

Run ADJRIINITPASSWD.sql again.
The script should now complete successfully without ORA-01031 errors.

Conclusion

This issue is caused by insufficient privileges and missing security context needed by the AD_JAR package.
By recreating the context and granting the required SELECT privileges, the password retrieval process works as expected and the AD utility runs without errors.

If you continue to face issues, ensure that all dependent roles and grants are properly synchronized in your environment.