Role is a set of permissions

e.g. a dataEntry role may have the following permissions
- edit record, add record (e.g. for one specific table)
e.g. a dbAdmin role may have all imaginable database permissions