CREATE ROLE new_role

CREATE USER new_user FOR LOGIN new_user

sp_addrolemember [ @rolename = ] 'new_role',
    [ @membername = ] 'new_user'

REVOKE INSERT ON OBJECT::Test.TestTable FROM 'new_role';
GRANT SELECT ON OBJECT::Test.TestTable FROM 'new_role';