Creating and assigning roles to users

The final steps in adding database users are assigning them special roles, as required, and granting permissions. For more information on permissions, see Chapter 12, “Managing User Permissions.”

The roles supported by Adaptive Server enable you to enforce individual accountability. Adaptive Server provides system roles, such as System Administrator and System Security Officer, and user-defined roles, which are created by a System Security Officer. Object owners can grant database access as appropriate to each role.

Table 10-4 lists the system roles, the value to use for the role_granted option of the grant role or revoke role command, and the tasks usually performed by a person with that role.

Table 10-4: System roles and related tasks

Role

Value for role_granted

Description

System Administrator

sa_role

Manages and maintains Adaptive Server databases and disk storage

System Security Officer

sso_role

Performs security-related tasks

Operator

oper_role

Backs up and loads databases server-wide

NoteThe sybase_ts_role, replication_role, and navigation_role roles are not included in the evaluated configuration.