I think that is your job to grant the permissions to the "remote user" on sql server side with what the user needs i/o "whatever".