Gene, You need 'ALTER USER' privilege to do this. SQL> create user nondba identified by nondba; User created. SQL> grant connect to nondba; Grant succeeded. SQL> conn nondba/nondba Connected. SQL> alter user nondba identified externally; alter user nondba identified externally * ERROR at line 1: ORA-01031: insufficient privileges SQL> conn / as sysdba Connected. SQL> grant alter user to nondba; Grant succeeded. SQL> conn nondba/nondba Connected. SQL> alter user nondba identified externally; User altered. HTH, -Mark -- Mark J. Bobak Senior Database Administrator, System & Product Technologies ProQuest 789 E. Eisenhower, Parkway, P.O. Box 1346 Ann Arbor MI 48106-1346 734.997.4059 or 800.521.0600 x 4059 mark.bobak@xxxxxxxxxxxxxxx www.proquest.com www.csa.com ProQuest...Start here. -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of genegurevich@xxxxxxxxxxxx Sent: Friday, July 27, 2007 10:14 AM To: oracle-l@xxxxxxxxxxxxx Subject: alter user identified externally Hello. I have not been able to alter users to "identified externally" unless the user has sysdba privilege: connect NonDba/password alter user NonDba identified externally ERROR at line 1: ORA-01031: insufficient privileges connect Dba/password alter user NonDba identified externally works successfully Is that the restriction that oracle places on who exactly may execute this command (I'm using oracle 10.2) or is there a way to work around it? thank you Gene Gurevich -- //www.freelists.org/webpage/oracle-l -- //www.freelists.org/webpage/oracle-l