• I'd agree that you need two roles.

    Create a role in each db, then assign the permissions needed with the GRANT statement. If you don't grant rights, as in control of the schema or db_owner, the role will not be able to do things, like alter the tables.