add DB user and grant access