Oracle Database / Accounts, Security & Access
ORA-01045: check the required login privilege
A valid password does not authorize creation of a database session. Confirm that the account is intended to connect to this PDB or database.
Environment and inputs: Oracle Database 19c baseline · SQL*Plus-compatible SQL unless RMAN, DGMGRL, ADRCI or a host shell is specified. Check release, patch level, edition and container first.
Start with this diagnostic
Use the stated SQL, RMAN, DGMGRL or host shell and replace sample names with approved targets. DBA and V$ views need authorized catalog access in the correct container. Do not grant broad privileges for an example.
SELECT grantee, privilege FROM dba_sys_privs WHERE grantee = 'APP_USER' AND privilege = 'CREATE SESSION';
Read the result
The direct-grant query is only part of the privilege picture; enabled roles and container scope also matter. No direct row alone does not prove the privilege is entirely absent.
Resolve and verify
Have the DBA verify the intended identity, effective grants and container. Add only the approved login capability and test the target service.
Operational precautions
Do not grant DBA or a broad legacy role to resolve a missing session privilege.