Our requirement is we have to use roles instead of direct grants. I saw in our other databases, we don't have direct grants in place, but roles only. I asked the developers how did they do it; they didn't know.

Now I need to figure out how do I do that? Any ideas? Thanks!