Generalise 'read-only db access' to 'db access', adding an option for the grant type that defaults to just 'SELECT'.
Grant full r/w access to the tc DB to the old theconversation.edu.au user, for the migration.