Need help with providing permissions for the App Registration from Azure DevOps Pipeline

Want to know what are the permissions assigned to a App Registration which is created when we initiate a Service Connection from Azure DevOps Pipeline towards connecting to an Azure SQL DB. we want to provide minimum required permissions so that Developers can create the Pipelines from DevOps with out having us to Authorize the Service Connection