seems a good starting point :

Get started with Database Engine permissions - SQL Server | Microsoft Learn