-- Maak gebruiker aan in de database
CREATE USER [user@domein.com] FROM EXTERNAL PROVIDER;

-- Ken alleen leesrechten toe
ALTER ROLE db_datareader ADD MEMBER [user@domein.com];