When you use the WindowsTokenRoleProvider, roles correspond to Microsoft Windows groups. File: Web.Config name="MyRoleProvider" type="System.Web.Security.WindowsTokenRoleProvider" />