db_datareader role along with selected table update
grant update on object::PROD.CustomerRelations to db_user

https://docs.microsoft.com/en-us/sql/t-sql/statements/grant-object-permissions-transact-sql?view=sql-server-2017