The smart administrator will take full advantage of SQL Server security roles, which grant and deny permissions to groups of users, greatly reducing the security workload.

I have worked with SQL Server for many years now, back to Sybase SQL Server days and there has always been confusion over Logins and Users.