djj is correct. Everything in SQL is a separate item. The login is separate from the user in a database. The permissions to objects are separate from both, as are roles.
If this should be a sysadmin,
ALTER SERVER ROLE [sysadmin] ADD MEMBER [XYZ/Andy La]
should fix things