I dont think from ASP.NET, anyone can get the UID and password as it is secure and cant be called. If you are unsure that someone else who have access to the server can see it through file system, you can also make use of encryption of web.config. Now regarding the role, you can either make it db_owner or sys_admin based on the requirement. ;)
Abhishek Sur **Don't forget to click "Good Answer" if you like this Solution.
My Latest Articles-->** Simplify Code Using NDepend
Basics of Bing Search API using .NET
Microsoft Bing MAP using Javascript