• Making the login db_datareader on the desired database would work as well, wouldn't it?