Multi tenancy by schema - Deny access to another tenants In a multi tenant environment, where the multiple tenants are in the same database and a schema is used to separate each one of them, how can I create a database user (MS SQL SERVER) for each schema, where the user has only access to his schema?

I know that I can do something like the code bellow, but I would like that by default a user has no access to any other tenant.

DENY SELECT ON schema::[dbo] TO [user_name]
DENY SELECT ON schema::[other_schema] TO [user_name]
GRANT SELECT ON schema::[safe_schema] TO [user_name]


Thanks
The solution is to add the Grant permissions and do not add any read or write role to the user.

GRANT SELECT ON SCHEMA::[SCHEMA] TO [USER]

GRANT INSERT ON SCHEMA::[SCHEMA] TO [USER]

GRANT UPDATE ON SCHEMA::[SCHEMA] TO [USER]

GRANT DELETE ON SCHEMA::[SCHEMA] TO [USER]