Read only user setup for ArcGIS for Server(10.1) SDE instance on SQL Server

[SuzanneKelly]

How do I set-up a read only role for a user?

I have enterprise Arc GIS for Server 10.1 and an SDE db on SQL Server 2008 R2 and I would like one of my internal users to only be able to read files on the instance. Where do I set these permissions?

Or is there a simple work around for granting internal access as read-only?

[VinceAngelo]

Enterprise geodatabase users cannot be truly "read-only" because the possibility exists

that they will need to write to logfiles (which are used for large selection sets).  You could

export the dataset to a file geodatabase, and set permissions appropriately, or you can

simply not grant the user UPDATE/INSERT/DELETE on all tables (allowing them to make

tables which would not matter, but no more).

- V