Do DB permissions flow from primary server to secondary server in SQL log shipping?

Question

Do DB permissions flow from primary server to secondary server in SQL log shipping? If someone wants db read permissions on the secondary, do we grant on primary and the permission flows to the secondary or do we just grant the db permissions directly on the secondary?

Answer 1

The quick answer is yes, but only for the user permission on the DB, if you got login and user permission on the server-side, you need to copy these ones to the secondary server to avoid the possible issue in case you do a fail over to the secondary server