In my database I have multiple users with SQL server authentication login and AD login.
For ex: User 1 and user 2 are from same team(ABC), if I create a role db_abc
User 1 needs read access to table a and table b. User 2 needs read access to table a, b and additionally to table c.
How do I manage this case? Should permissions be given at user level than to roles.? What is the best practice in managing users and roles?