When I create a new user and I assign server roles and database roles, what role(s) do I need to assign to this new user if I want this new user to be able to execute DDL and DBCC commands? I do not want to assign the same roles as the (sa) because that's too much power for this user.