Minimum rights for db role for SQL Server

[NancyFolsom]

I haven't received any replies so I'm not sure if it's unanswerable or I just phrased it badly. I'm hoping someone using SQL Server knows the minimum rights a SQL Server role needs for DotMimSync syncing. I'm trying to upgrade from an old package and am having trouble getting sync to run under the existing role.

Old version role belongs to db_datareader, db_datawriter. I grant execute and select to the role. Even though I create the stored procs and table types in a script, the first time it syncs, it wants to reprovision the database which fails dropping the stored procs, etc.

They're willing to elevate the access but want to know exactly what rights the role needs.

I don't have access to their server so I can't experiment.

Dotmim.Sync.Core, Dotmim.Sync.SqlServer, Dotmim.Sync.SqlServer.ChangeTracking 1.3 (current as of this post).
SqlServer backend 2017, standard version
Application is a .Net Framework 4.8 WPF app.

Thanks in advance!
Nancy

Original post:
This may be out of bounds for a DMS discussion group, but if anyone is using a SQL Server backend, I'd appreciate your advice. I've looked in the docs and in the discussions here.

I'd like to know what the minimum user access for a SQL Server database needs for permissions, if that's been documented.

The user my services run under a user login that has a role membership in db_datareader, db_datawriter. I grant execute and select. Currently I have to send them scripts to change db schema, drop/create/execute stored procedures, drop/create table types, and so on.

They are planning to turn off grant execute which is bad news, of course.

I'm proposing that they enable permissions for the user my services WPF runs under that would let us rely on the DMS management of all the change tracking, etc.