Assuming datareader is required, the following result was found.
Mapping. Map the login to the database they will have access to. Tick the boxes for role membership next to public and db_datareader. Confirm by clicking OK. You should get something like the following: Database-level role names from...