Can you check something.....sapsa should have the sap_adm role. If you look at the sap_adm role, it should have the following roles:
sa_role
js_admin_role <--- Missing from yours??
sap_mon
sap_mon should have mon_role.... In addition, sapsa should have sybase_ts_role.
Reason for question is whether the role was missing or inheritance wasn't being checked. Some of the code used to do has_role(<role_name>)=1 - which fails if the role is inherited (which would return 2).....e.g. optdiag used to have this issue with sa_role. So the question is whether there was an issue with your setup in which js_admin_role wasn't granted correctly to sap_adm - or if the routine that is failing was checking improperly.