1. A method for facilitating role-based cryptographic key management, the method comprising: receiving a request at a database server from a user to perform a cryptographic operation on data on the database server, wherein the user is a member of a role, and wherein the role has been granted permission to perform the cryptographic operation on the data; receiving from the user at the database server a user key, which is associated with the user; unwrapping a wrapped role key with the user key to obtain a role key, which is associated with the role; unwrapping a wrapped data key with the role key to obtain a data key, which is used to encrypt and decrypt the data; and using the data key to perform the cryptographic operation on the data.