readonly_role

CREATE ROLE IF NOT EXISTS readonly_role;

GRANT SELECT ON default.* TO readonly_role;