Explicitly document database privileges required for ingest