A role was created as below:CREATE ROLE [blah] WITH NOLOGIN
As already noted this means “do not allow to login”.
ALTER ROLE [blah] WITH ENCRYPTED PASSWORD 'blahpassword' ;
If you want them to use a password this is also required in addition to the ability to login.
GRANT CONNECT ON DATABASE [blahdb] TO [blahuser] ;
Redundant with the default connect grant given to the public pseudo-role.
David J.