As mentioned above, when you install EPiServer CMS using the manager, WindowsRole/Membership Provider is default.
An easy way of doing this is using the ASP.NET Configuration tool (that is located under Project -> ASP.NET Configuration in Visual Studio).
Activate the SQL server role and membership provider (Providers tab) and then you can go ahead and add users and roles (Security tab).