• Existing users can query the log shipping secondary.

    You cannot create new users in the secondary because that's a change and the database is read-only (no changes permitted)

    You can create the user on the primary and the log shipping will take it over to the secondary. Make sure if you're also creating a login that you explicitly specify the SID

    without creating a login, how we can create a user? because if we go to a database and try to create a user, then it will ask a login name right? So we must need to create login first in order to create a user right?

    Make sure if you're also creating a login that you explicitly specify the SID

    Could you please explain me the above a bit more..

    Thanks