Watch this video on YouTube
The fixed server role "sysadmin" in my Azure SQL Managed Instance allows the user to any activity. Which other fixed server role allows the user to grant permissions on themselves, which could allow them to do the equivalent of sysadmin?