Don't think I've seen such a guide really. I would personally try giving read access to all tables and then execute access to all sps. That should take care of most use cases. I know there was a table used for load balancing before that needed write access. Don't know if that's still used though (or if you need it in your project). Maybe someone from epi can give some recommendation? I think the official is still dbo.