The typical architecture is to have microservices all share one schema so that permission checks can be done for resources that a given microservice might not own themselves. You could have each service completely isolated, but you'd like end up having to duplicate relationships (e.g. user data) as you pointed out. The folks at Airbnb and Google recommend centralizing into one schema as much as possible and having fewer, ubiquitously shared definitions.