public abstract class RoleProvider : ProviderBase
{     
        public abstract string ApplicationName { get; set; }
 
        public abstract void AddUsersToRoles(string[] usernames, string[] roleNames);
       
        public abstract void CreateRole(string roleName);
        
        public abstract bool DeleteRole(string roleName, bool throwOnPopulatedRole);
        
        public abstract string[] FindUsersInRole(string roleName, string usernameToMatch);
       
        public abstract string[] GetAllRoles();
       
        public abstract string[] GetRolesForUser(string username);
        
        public abstract string[] GetUsersInRole(string roleName);
       
        public abstract bool IsUserInRole(string username, string roleName);
        
        public abstract void RemoveUsersFromRoles(string[] usernames, string[] roleNames);
       
        public abstract bool RoleExists(string roleName);
}

public class MyRoleProvider : RoleProvider
{
    public CurrentUser GetEmployee()
    {
        var identity = HttpContext.Current.User.Identity as WindowsIdentity;
        return GetUser(identity);
    }

    ...
}

public class CurrentUser
{
    public Employee Employee { get; set; }

    public bool IsAdmin
    {
        get
        {
            return Employee.Roles ... (int)Roles.Administrator;
        }
    }

    public bool CanRequestCreate()
    {
        // логика
    }
}

bool canRequestCreate = ((MyRoleProvider)Roles.Provider).GetUser().CanRequestCreate();

public class CurrentUser
{
    public bool IsAdmin // роль
    {
        get
        {
            return Employee.Roles ... (int)Roles.Administrator;
        }
    }

    public bool CanRequestCreate() // пермиссия
    {
        // логика
    }
}