This section describes documentation changes for the Utility Guide.
Users must have either sa_role or sso_role to generate DDL for:
Encryption keys
Logins
Roles
For all other objects, users do not need any specific permissions or roles to generate DDL.
