Role management in .NET:
Can be done through three built-in role providers
Allows you to manage the rules related to the users of the application
Does not require a database
Cannot be done using SQL