From c870d8acfee845da91cf8127a169cde97e763fb5 Mon Sep 17 00:00:00 2001
From: Collin Barrett <collinbarrett@users.noreply.github.com>
Date: Sat, 1 Jun 2024 09:40:45 -0500
Subject: [PATCH] =?UTF-8?q?doc(dir):=20=F0=9F=93=84=20create=20sql=20users?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 services/Directory/CreateSqlUsers.md | 33 ++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 services/Directory/CreateSqlUsers.md

diff --git a/services/Directory/CreateSqlUsers.md b/services/Directory/CreateSqlUsers.md
new file mode 100644
index 000000000..508a3112a
--- /dev/null
+++ b/services/Directory/CreateSqlUsers.md
@@ -0,0 +1,33 @@
+# DirectoryMigrations user for applying EF Core migrations
+
+```sql
+USE [master];
+GO
+
+CREATE LOGIN DirectoryMigrations WITH PASSWORD = 'my_password';
+GO
+
+USE [directorydb];
+GO
+
+CREATE USER DirectoryMigrations FOR LOGIN DirectoryMigrations;
+ALTER ROLE db_ddladmin ADD MEMBER DirectoryMigrations; -- to apply migrations
+ALTER ROLE db_datareader ADD MEMBER DirectoryMigrations; -- to read from __EFMigrationsHistory
+ALTER ROLE db_datawriter ADD MEMBER DirectoryMigrations; -- to insert to __EFMigrationsHistory
+```
+
+# DirectoryApiReadonly for API runtime reads
+
+```sql
+USE [master];
+GO
+
+CREATE LOGIN DirectoryApiReadonly WITH PASSWORD = 'my_password';
+GO
+
+USE [directorydb];
+GO
+
+CREATE USER DirectoryApiReadonly FOR LOGIN DirectoryApiReadonly;
+ALTER ROLE db_datareader ADD MEMBER DirectoryApiReadonly; -- to read from __EFMigrationsHistory
+```
\ No newline at end of file