Question: I moved a database from SQL Server 2012 to Azure. I don't want to use the user `master`, so I created a user `test`. This is what I did for database XXX on Azure:

```
create user test from login test with default_schema=[dbo]
exec sp_addrolemember 'db_owner','test'

```

I checked, and the database objects I am interested in are all in the schema `dbo`. The table `Users` is in the schema `dbo`.

The connection string in my web project has `test` as the login. It produces the error message:

```
The SELECT permission was denied on the object 'Users', database 'XXX', schema 'dbo'

```

What does the error message mean and what can I do to let user `test` access the database XXX?

Answer: 
Using SSMS, I made sure the user had connect permissions on both the database and ReportServer. 

On the specific database being queried, under properties, I mapped their credentials and enabled datareader and public permissions. Also, as others have stated-I made sure there were no denyread/denywrite boxes selected. 

I did not want to enable db ownership when for their reports since they only needed to have select permissions.
I resolve my problem doing this. [IMPORTANT NOTE: It allows escalated (expanded) privileges to the particular account, possibly more than are needed for individual scenario]. 

1. Go to '**Object Explorer**' of SQL Management Studio.
2. Expand **Security**, then **Login**.
3. Select the user you are working with, then right click and select **Properties Windows**.
4. In *Select a Page*, Go to **Server Roles**
5. Click on **sysadmin** and save.