create user x identified by y;
grant create session to x;
grant create table to y;

They wont be able to see any other schemas UNLESS they have been granted to public