Data Access - Security & User Management

//create role
CREATE ROLE lob1analyst;
// assign role to group
GRANT ROLE lob1administrator TO GROUP lob1adm WITH GRANT OPTION;
// manage access
GRANT ALL ON DATABASE lob1 TO role lob1administrator;