-- run as a privileged role (e.g., sensor_admin)
create role sensor_reader login password 'GLuBeBFPZuxjru2OYiwlI1eT5Fg';

grant usage on schema public to sensor_reader;
grant select on all tables in schema public to sensor_reader;

alter default privileges for role sensor_admin in schema public
  grant select on tables to sensor_reader;