Authorization in database

 Hi.
Is there a way to implement authorization (roles, permissions a etc.) without using the web.config ? is there a way to do it using a SQL Server database ?
The reason I'm asking is that I need to give the user the ability to create roles and give them permissions, but I do not have write permissions to the server, so I cannot create (in each direcory) or alter a web.config.
 
Thanks.
...