Permissions are set in the sybsystemprocs database.
Users with the sa_role have default execution permissions on the system ESPs. These System Administrators can grant execution permissions to other users.