Roles persisted in the database. Role is as a composition of grants. Roles may be assigned to user.