Ok, thank you. You guide me to find out my mistake.

ALTER ANY LOGIN does not give to user the right to add it to sysadmin or any other server role...

I'm sorry, you're right.

I have an app that must create login and user, but not be able to change their server roles. Is it possible?

In my search I found ADD_SERVER_ROLE_MEMBER...