The user has no owned schemas, and their only membership is the db_owner role.

OK, so in SSMS I'll remove their db_owner membership, and tick the db_datareader and db_datawriter roles.

(And I...

Thanks.

I want the user to be able to insert, amend and delete records within tables, but not to be allowed to create or delete any tables.

How do I achieve this?