I would assign privileges to a user group defined on a domain server for
DB and table accesses (on different machine in the domain) and restrict table usage to "SELECT" only.
A "CONNECT" has been granted for the group at DB level and "SELECT" at table level.
When logging on to the database, the member of the group used is well connected but "SELECT" right seems not to be recognized.
I received a SQL0551 saying that connected user has no "SELECT" privileges.