AUDIT SYS USER ACTIONS

Good day!

I require your help to audit all the actions of the SYS user, in this case the client requests to audit the creation and drop of users generated by the administrator user, but when trying to audit these actions the database shows me the following error:

SQL> audit all by sys by access;

audit all by sys by access

*

ERROR in line 1:

ORA-00983: unable to execute audit or noaudit on SYS user actions

already try to do the following:

set the parameter AUDIT_SYS_OPERATIONS = TRUE

Alter system set audit_sys_operations = TRUE scope = spfile;

and restart the database, and run again: