Nor did I. Certainly a server level pemission makes sense if "various databases" means "every database on the instance" but the more natural interpretation is surely that "various databases" means what it says, not "each and every database" so that grants on the various databases rather than a grant at server level are what is required. Also, I believe that the absence of a domain qualification on the principlal name means it can't be the server login for an AD group, so it must be a database user and what's claimed to be the correct answer isn't even a possible answer.