Role based access control

Would like to grant some users access to a subset of databases.
Would like to grant some users read-only so they can't make edits to sensors.