I want to give a group of users access to run select queries on a database snapshot but not the live database, but snapshots are Read-Only and that includes the security configuration.
One solution might be to run a script that
1) Adds the users to the live database db_datareader role.
2) Creates the database snapshot
3) Drops the users from the live database db_datareader role.
Is there a cleaner way to do this?