-- Create census user the ability to sign in with a password
CREATE LOGIN CENSUS WITH PASSWORD = '<strong, unique password>';
-- Give the census user the ability to login
CREATE USER CENSUS FOR LOGIN CENSUS;
-- Give the census user the ability to connect to database
-- Give the census user the ability to read all tables
EXEC sp_addrolemember 'db_datareader', CENSUS;
-- Grant census user ability to read schema and data
GRANT SELECT, VIEW DEFINITION ON SCHEMA::<your schema> TO CENSUS;