I am trying to assign a SQL Server database role to a user who just needs to be **able to see data** across all tables.  
I was wondering what is the difference between `db_datareader` and `db_denydatawriter`?  
From the documentation I don't seem to realize any difference. 

Thanks,