Should contain list of server and database level permissions + role template as well as specified what works and what doesn't