Permissions for a given user are cumulative, including all permissions granted/denied directly to the user and those inherited from their role membership(s).
If you don't want to add individual users to your db_execute role, add the MasterData role to the db_execute role. MasterData role members will then have permissions granted/denied to db_execute too.
ALTER ROLE db_execute
ADD MEMBER MasterData;
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…