They specify what changes can be made to the database.

They're synonymous with deployment user accounts.

They specify one or more roles a server plays within the application, such as hosting the database, or running a web server.