We use a lot of applications with dedicated user and roles.

In that particular case, since the account should only have access to that specific DB, we do default to the...