whats the best way to manage Roles and Access Rules?

am i allowed to make my own form and insert to this table?

if i insert new role on this table will it change the website webconfig?

should i just manage the roles on Website ASP.NET Configuration or webconfig? or my own form that manages the aspnet_Roles table?

what do most companies do?
...