use app and db roles on servers