Since you are using SQL Server local logins, they cannot be grouped. Each login is independent and each login needs a user in the database.
Where you can get some saving in specifying rights is to create roles, to which you
deny rights. (Note that
deny rights override
grant rights.) Then use these roles to give rights to the users.
This way a role contains the specifications of permissions, rather than applying those to every user individually.
After this you can add the users to the roles that user needs. For example:
- Allen - ReadOnly role
- Sally - ReadOnly role, MaintainAccounts role
- Zenubia - UpdateNonSecureData Role
This preserves your security settings at the role level, so you should not need to repeat those grants. Just add or remove a user from a role, when needed.