SQL to create a read-only account.

1. Enter SQL Server Management Studio

2. Select Security, login name, right-click New Login

3, enter the user name and password in the general

4. In "User mapping", "users mapped to this login" select the database that the user can manipulate

5, select "Db_datareader" in "Database role membership",

6, such a read-only user is created to complete.

Server role Reference (can operate on a database)

Bulkadmin can run BULK INSERT statement BULK INSERT verbose http://blog.csdn.net/jackmacro/article/details/5959321

DBCreator Create, modify, delete, restore any database

Diskadmin managing disk Files

Processadmin can terminate a program that runs in an instance of the database engine

Securityadmin can manage logins and their properties, have Grant,deny, and revoke server and database-level permissions, and can reset passwords for SQL Server logins

ServerAdmin can change server-wide configuration options and shut down the server

Setupadmin can add and remove linked servers and execute stored procedures (such as sp_serveroption) on certain systems that can execute

the sysadmin makes any activity in SQL Server, which feels that the permissions span all other fixed server roles, by default, all members of the Windows Builtin\admin Group (local Administrators group) are sysadmin fixed server corner Member of Color

User Mapping Reference (can operate on database data)

DB_Owner users who can perform all the technical actions in the database

Db_accessadmin can add, delete user's user

Db_datareader can view data from user tables in all databases

Db_datawrite can add, modify, and delete data from all database user tables

db_ddladmin user that can perform DDL operations in the database,creation of DDL (Data Definition Language) tables, and management

Db_securityadmin can manage users in the database for all actions related to security permissions

Db_backoperator users who can back up the database (DBCC and CHECKPOINT statements can be published, which are typically used before the backup

Db_denydatareader users who cannot see any data in the database

Db_denydatawrite Users who cannot modify any data in the database