For existing clients on where you push out application/database agents afterwards you most of the time have to run the cvpkgchg command to replace the permissions. In case of a push installation via the CommCell console you have a possibility to enable to option "Override Unix Group And Permissions”.
https://documentation.commvault.com/11.24/expert/1935_changing_unix_groups_and_permissions_on_unix_clients.html
This checkbox is not present in Command Center (https://documentation.commvault.com/11.24/essential/127715_adding_database_server_for_sybase.html). Does this mean that it will do it automatically? My assumption is that it only works for new push installation not for scenarios in where client the client computer is already equipped with a restore-only client.