Silly me. I assumed that the SYS user would automatically be granted full rights.

Actually, it was in the inquiry group, though I am not sure why. Since no groups were set up, it seemed to have inherited rights from Adagio Contacts.