Report question

Question: Best practice on users/roles on SQL Server for a web application