Revoke a role

Use the REVOKE statement to revoke a role from a user or another role.

Prerequisites

You must have the GRANT OPTION or GRANT ANY ROLE privilege and the role to be revoked. For information about how to view your roles, see View roles.

Considerations

If you do not specify the GRANT OPTION privilege when granting a role, the revoking operation will not cascade. If you specify the GRANT OPTION privilege when granting a role, the revoking operation will cascade.

Examples

• Revoke a role from a user:

  obclient> REVOKE role_list FROM user_name;
  

• Revoke a role from another role:

  obclient> REVOKE role_list FROM role_name;
  

When you revoke multiple roles at the same time, separate the roles with commas (,).

Here is an example:

obclient>  REVOKE role1 FROM test;

For more information about the REVOKE statement, see REVOKE.