Re: What is the difference between roles and profiles?
To expand a bit..
A role can be assisgned a collection of access rights in the same way a user can. You then grant the role to a set of users, rather than grant each user the same rights.
This cuts down on maintenance, adds standardisation (hence reducing erroneous access to sensitive data) and reduces the size of the dbc.allrights table, which is very important in reducing DBC blocking in a large environment.
Profiles assign different characteristics on a User, such as spool space, permspace and account strings. Again this helps with standardisation. Note that spool assigned to a profile will overrule spool assigned on a create user statement. Check the on line manuals for the full lists of properties.