diff --git a/deployment/roll-db-credential.sh b/deployment/roll-db-credential.sh
index 63de54e..cc02223 100755
--- a/deployment/roll-db-credential.sh
+++ b/deployment/roll-db-credential.sh
@@ -16,7 +16,8 @@ begin
   else
     ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
   end if;
-  GRANT ALL PRIVILEGES ON DATABASE $DATABASE TO $LOGIN;
+  grant select on application_t to $LOGIN;
+  grant insert on measurement_t to $LOGIN;
 end
 \$\$
 ;