I think there is a dataReader role in the database just assign the user to that role. Should be what you want (at least I think so).