Thanks,

It's clear that we must need to create login in order to create a user.

But Is that must to create a user on Primary production Database, in order to access the log shipped standby database on secondary for that user?

In that case we are giving access to Production database unnecessarily. Because the user actually do need access to Production database. He only required access to the secondary database so that he can query that database instead of Prod.

Please advice