hoping someone an help me; assigning web service role allows to access db also and not just apis?