System-defined roles

Table 5-1 lists the system roles, the value to use for the role_granted option of the grant role or revoke role command, and the tasks usually performed by a person with that role.

Each role is described in detail in the following sections.

**Table 5-1: System roles and related tasks**
Role	Value for role_granted	Description
System administrator	sa_role	Manage and maintain Adaptive Server databases and disk storage
System security officer	sso_role	Perform security-related tasks
Operator	oper_role	Back up and load databases server-wide
Sybase Technical Support	sybase_ts_role	Analysis and repair of database structures
Replication	replication_role	Replicate user data
Distributed transaction manager	dtm_tm_role	Coordinate transactions across servers
High availability	ha_role	Administer and execute failover
Monitor and diagnosis	mon_role	Administer and execute performance and diagnostic monitoring
Job Scheduler administration	js_admin_role	Administer Job Scheduler
Job Scheduler user	js_user_role, js_client_role	Create and run jobs through Job Scheduler
Real-time messaging	messaging_role	Administer and executer real-time messaging
Web Services	webservices_role	Administer Web services
Key custodian	keycustodian_role	Create and manage encryption keys

sa_role is grantable by a user who has sa_role. All other system role are grantable by a user with sso_role. If a user defined role has been granted both sa_role and other system roles, that role may be granted only by a user who has both sa_role and sso_role.