The roles required for using sp_configure:
Any user can execute sp_configure to display information about parameters and their current values.
Only a system administrator or a system security officer can execute sp_configure to modify configuration parameters.
Only a system security officer can execute sp_configure to modify values for:
allow procedure grouping
allow remote access
allow sendmsg
allow updates to system tables
auditing
audit queue size
check password for digit
current audit table
enable ldap user auth
enable pam user auth
enable ssl
log audit logon failure
log audit logon success
maximum failed logins
minimum password length
msg confidentiality reqd
msg integrity reqd
secure default login
select on syscomments.text
SQL Perfmon Integration
syb_sendmsg port number
suspended audit when device full
systemwide password expiration
unified login required
use security services
