Granular Permissions Not Installed on SAP ASE

This section describes the minimum permissions required for the Sybase (SAP ASE) administrator user when the Granular Permissions module is not installed on SAP ASE (sp_configure enable_granular_permissions, 0).

Respective administrator permissions must be provided for the following operations:

  • Test Connection

  • Aggregation

  • Provisioning

The minimum Administrative Account permission required to be granted for provisioning is SSO_ROLE (System Security Officer). The following scripts must be used to create minimum permission user and role. These permissions must be run by a SA or administrator-level login user.

  1. Log in using administrator credentials and create a new user on managed system using the following command:

    Copy 
    sp_addlogin [loginname],[password]
    go

  2. Add a database user:

    Copy 
    use [databaseName]
    go
    sp_adduser [loginname], [databseUserName]
    go
  3. Grant read-only access to the newly created user using the following command:
    Copy
    grant select on master..sysloginroles to [username]
    grant select on master..syssrvroles to [username]

    To access user-defined databases, create an account on that database as follows:

    Query to create Database user:

    Copy
    use [databaseName]
    go
    sp_adduser [username], [databaseUserName]
    go