How can I set an account or role so that it only have read access to the
database? I have check the doc. that it only allow me to grant that right on
the table level.