• Shouldn't, but I'd need to test in SQL Azure. AFAIK, this means the user can only create tables in schemas they can control or access. If I create a new user/role and grant just this, with authorization to the [com] schema, the [com] user can't create dbo.MyTable.

    YMMV, but I'd be careful here. If you are granting permissions to users/roles in complex ways, the intersections could reveal a hole.