By specifying a where clause on the grant role statement, the system security officer can control the conditions under which a user can assume a given role. Adaptive Server evaluates the condition, termed a role activation predicate, when the user sets the role on or, for default or automatically activated roles, during login. Only if the role activation predicate evaluates to true is the role activated. See “Predicated role activation”.