what is the cleanest way to give an agent access to a database safely

want it to query but never write, and never see other tenants data. building a read only scoped view feels right but I would love to hear battle tested setups.