The use of roles by directory users depends on the setting of the AuthorizationSupported property:
- When the AuthorizationSupported property is set to no, directory users can log on using a username that matches a database username. The directory user has access to all roles in which the matching database username is a member.
- When the AuthorizationSupported property is set to yes, directory users are authorized privileges according to the roles (and users) to which they are mapped in the directory.