When you deploy DeepSee solutions you often do not want grant a User %All Role to work with a particular Dashboard.
Consider a Dashboard 'Dash' with a few widgets where listings are being used.
If you manage a Role to get access to the Dash you need to grant access to %DB_DBNAME resource to have a database access, grant access to a Dashboard resource (if any) and ... grant SELECT accesses to all the tables involved in SQL queries being used in all the listings of widgets.
And every time(!) when you update a listing you need to rearrange that access level in a Role (either grant new or revoke not used anymore) to the tables.
How do you manage that? Manually? Or you have a magic shortcut script or recipes in hands? Would you please share?