Ok, we are using global groups to control which DB they can access, we just want to make sure that the System User rights don't go too far, over ride...

I want the user to be able to run reports on "HIS" data, but don't want the user to be able to run reports on the whole SQL DB, just...