• A login is a principal at the server level and can be granted/revoked/denied permissions at the server level.

    A user is a principal at the database level and can be granted/revoked/denied permissions at the database level. It is linked to a login.

    A schema is an organizational structure for objects within a database. Permissions can be granted/revoked/denied on whole schemas to users or roles.

    That's the simple version.