Sybase Roles

Sybase role is a mechanism for assigning groups of privileges to one or more logins. There are both system roles which come with the server at install time and user-defined roles which are created by administrators after installation. A login may hold any combination of roles.

There are eight system roles:

1. The System Administrator Role(sa_role): is exclusive controller of server-wide privileges.By default, sa_role is granted to login sa at the time of installation. sa_role responsibilities are:
Grant or Revoke sa_role
Shutdown and start Server.
Configure Server Parameters
Device definition, Create Database.
Execute dbcc commands

2. sso_role(System Security Office Role): This role regulates the access the ASE server. sso_role responsibilities are:

Creating Sybase Logins
Password change of any account.
Granting and Revoking of sso_role.
Create, grant and revoke of user-defined roles.
The password and security-related configuration options
To manage auditing system
To lock or unlock the login

3. oper_role(Operator Role): oper_role is used to dump database, dump transaction,load database,load transaction, checkpoint and online database.
4. replication_role: Used by replication processes.
5. navigator_role: Used by navigator server.
6. sybase_ts_role: Used to perform undocumented maintenance tasks.
7. dtm_tm_role: Used in externally-coordinated XA transports
8. ha_role: Controls high availability Companion Server actions(Administer and execute failover)