I am working on a requirement to fetch metadata (databases, collections and schemas) from a DB. I need to provision minimum access to this user to just fetch schemas, collections and dbs and not read the data. Currently there are no built in roles that help me do these things, so i need to create custom roles. Enabling data federation gives access to sqlGetSchema at a global level. But for listing collections and dbstats, i need to add the list of databases manually provisioning listCollection access. But I got 100s of DBs. Is there a better way to do this?