Which retool role to give access to?

Hello!

I have a self hosted retool, I want to give access to some AWS resources, but I realized Retool had 6 different roles: retool-{execution,service,task,temporal-execution,temporal-service,temporal-task}-role.

Which one should get the AWS resources access?

Thanks,
Philmod