Recommended pattern for managing resource permissions

Is there a recommended pattern for, say, having a database resource, which is used by scripts.
The scripts themselves are in a folder which gives View access to operators.
Is there a way to give the operators access to run the scripts against the database resource, without giving them the ability to view the database resource secrets?
Was this page helpful?