Problem with query: ASA Error -121: Permission denied: you do not have permission to select from "SCANS"

Products

• Endpoint Protection
• Security Information Manager

Issue/Introduction

You are getting the above Error for SCANS, SEM_CONTENT tables from Symantec Endpoint Protection State Event Collector in Symantec Security Information Manager

 

Typical error message from SEP State Collector (in sybase mode only)
WARN 2011-10-10 13:53:00,097 Collectors.3293.wGroup.[workinggroup0].Sensor.[EARTH2_SEP12_State_Sybase] Thread-116 Problem with query: SQL Anywhere Error -121: Permission denied: you do not have permission to select from "SCANS"   (query => [SCANSQuery]

 

Cause

User created for SEP state collector does not have read permission for the tables shown in Error.

Collector documentation Page 15 Step 5 is missing some entries in the list of views to grant permission.

Resolution

1.On the SEPM server, start the Interactive SQL program.
On Windows, this program is named dbisqlc.exe.
2.GRANT SELECT ON "DBA"."SCANS" TO "read_only_user_name" FROM "DBA"
3.Click Execute.
If you get error for any other table like "SEM_CONTENT", "SEM_COMPUTER", "SEM_JOB", "LICENSE", "LICENSE_CHAIN" please replace that with SCANS in the above statement and execute