SQL server database Role management - Azure SQL MI
What is the best practice in managing users and roles?


Create custom roles and grant permissions to the roles; then add users to the roles.

eg:

create role reader_abc
grant select on dbo.a to reader_abc
grant select on dbo.b to reader_abc
grant select on dbo.c to reader_abc

create role reader_ab
grant select on dbo.a to reader_abc
grant select on dbo.b to reader_abc

alter role reader_abc add member alice
alter role reader_ab add member joe


You can also assign permissions to an entire schema:

grant select on schema::dbo to report_users;


Or the whole database: 

grant select to report_users;