When using a direct share, which two privileges does a role require to manage access to the shared objects that utilize database roles?