-- 1) CREATE ROLE statements for at least 2 distinct roles. -- Example roles: read-only analyst, read-write editor. -- 2) GRANT statements assigning appropriate permissions to each role: -- - ...