Sybase Database : least permission/roles to extract ddl
From the ASE Utility Guide; Section: ddlgen, regarding Permissions required to use ddlgen:

Users must have either sa_role or sso_role to generate DDL for:
- Encryption keys
- Logins
- Roles
For all other objects, users do not need any specific permissions or roles to generate DDL


Is your user receiving errors when they attempt to use ddlgen (and if so, what errors)?