Sorry Jeroen,
The problem may occur in this case,
1) if an user(suppose 'sa' ) who is having sso_role can revoke or grant the roles to himself, then if by mistake he has revoked its own sso_role, then what will happen??
what will be the solution of it ??
as i have depicted in the below figures, in ASE 15.7, it allows to do this
fig. 1: have granted roles
Image may be NSFW.
Clik here to view.
fig 2: allows to revoke the role, from itself(even sso_role)
Image may be NSFW.
Clik here to view.
please explain it...!!
Thanks
-----------
with kind regards
DJ