They shouldn't need any global permssions, simply just to the ubb database...
My account is set to usage (aka nothing in global) and then everything is selected for their db's (I also set the db specific permissions to username% so that any db based on the username adopts those permissions)