have you read through this and this? there’s a lot of information (which i have pretty much forgotten).
i guess the authentication database has something to do with role assignments.