SQL Server grant permissions to STANDBY database
Below steps should work :


Create windows login on ServerA
Create user in database mapped to login
Drop login on ServerA - (OPTIONAL -if you want to have that login intact then leave it, else drop it).
Grant any required permissions to user in database
Create login on log shipping ServerB


a. If using SQL authentication then create login while specifying SID from ServerA
b. If using Windows authentication, create login without specifying SID

 ---To query for the SID on the ServerA:

  Select SID
  From sys.database_principals
  Where name = 'Test'

 ---To create the login on the ServerB :

  Create Login [Test]
  With SID = '&lt;put SID from query here&gt;',
  Password = '&lt;add password here&gt;'


Make sure log shipping jobs have completed one full run since completion of step 4