Hey Fabian,
That seems to be the underlying problem.
He executes the sapdba/sapconn roles and it would seem from what Symon is telling us is that the changes are only persisted for his current session.
He logs off and the role assignments are apparently lost.
In any case, that's what I have understood he is describing.
Cheers,
Amerjit