Roles are what generate database credentials. They can be static or dynamic.