[AccessD] Access 2007 “Read Only” access to SQL Server 2005

Background.  Client = Small firm, no IT Staff, no DBA, purchased package
that uses SQL Server 2005.



Client wants to use Access 2007 to link to the tables in SQL Server in order
to create reports (via ODBC).



I have DB2 experience, but only limited experience with SQL Server
(especially in the security area).



What is the best way to ensure that no one working with Access will ever be
able to update any of the tables on SQL Server?  All users will be able to
see all of the data in all of the tables, we just cannot allow any updating
of data in the SQL Server tables.



I have read about a SQL Server “Fixed Database Role” called “db_datareader”



Is the use of db_datareader the best route to go?



Is there info on the web on how to set up and use db_datareader (or can
someone here explain the steps)



Thanks,

Brad