You can grant database privileges directly to users, or grant privileges to roles and then assign role membership to users.