The public role sets the basic default permissions for all users. Every user that’s added to SQL Server is automatically assigned to the public role—you don’t need to do anything.

Say there are 1000 Windows users in a group called Accounting. To enable access to your SQL Server for those 1000 Windows users requires a single Windows login based on the Accounting group.

You can give your users rights to check if reports have run or jobs are complete without granting full admin rights. Here's how you can do so by using SQLAgentReaderRole in SQL Server.