you must install a RDP at any of the available physical servers and make settings in "group policy Management". No.
- Any roles not necessary, and there is no such role.
- And certainly not on any
You need to go to the computer running the web server and allow remote desktop access.
My computer - properties - remote settings.