bus

/* Create server user */
Create login loginJason
with password = '123',
default_database = laba

/* Create user Jason */
USE [laba]
CREATE USER [Jason] FOR LOGIN [loginjason]

/* Create server role jasonDBA */
create server role [TEST_DBA]

/* Alter server role, add member Jason */
alter server role [TEST_DBA] add member [loginjason]

/* Grant permissions to TEST_DBA */
use [master]
grant view any database to [TEST_DBA]
grant connect SQL to [TEST_DBA];
grant create any database to [TEST_DBA];
grant view any database to [TEST_DBA];
grant view any definition to [TEST_DBA];
grant view server state to [TEST_DBA];

/* Verify granted permissions */
SELECT SUSER_SNAME()
EXECUTE AS LOGIN = 'loginjason'
SELECT SUSER_SNAME()
SELECT * FROM sys.dm_os_windows_info
REVERT
SELECT SUSER_SNAME()

/* notes

DENIED always takes more priviledge over other GRANTS
sysadmin in the super user and denied doesn't affect it

*/