Hi @Mark Miller​ ,

Right now, users need to have the SELECT + USE permission on the tables and can see the data too, or they do not have the SELECT permission and they do not see the tables at all. You need SELECT to "see" an object, just USE on CATALOG and SCHEMA should not let them see any objects. 

This will be addressed in an upcoming feature in the next couple of months. Hopefully that was able to answer your question. Thanks!