REVOKE <roles>

On this page

New in v2.0: The REVOKE <roles> statement lets you revoke a role or user's membership to a role.

Note:

REVOKE <roles> is an enterprise-only feature.

Synopsis

Required Privileges

The user revoking role membership must be a role admin (i.e., members with the ADMIN OPTION) or a superuser (i.e., a member of the admin role).

Considerations

The root user cannot be revoked from the admin role.

Parameters

Parameter	Description
`ADMIN OPTION`	Revoke the user's role admin status.
`role_name`	The name of the role from which you want to remove members. To revoke members from multiple roles, use a comma-separated list of role names.
`user_name`	The name of the user or role from whom you want to revoke membership. To revoke multiple members, use a comma-separated list of user and/or role names.

Examples

Revoke Role Membership

> SHOW GRANTS ON ROLE design;

+--------+---------+---------+
|  role  | member  | isAdmin |
+--------+---------+---------+
| design | barkley | false   |
| design | ernie   | true    |
| design | lola    | false   |
| design | lucky   | false   |
+--------+---------+---------+

> REVOKE design FROM lola;

> SHOW GRANTS ON ROLE design;

+--------+---------+---------+
|  role  | member  | isAdmin |
+--------+---------+---------+
| design | barkley | false   |
| design | ernie   | true    |
| design | lucky   | false   |
+--------+---------+---------+

Revoke the Admin Option

To revoke a user or role's admin option from a role (without revoking the membership):

> REVOKE ADMIN OPTION FOR design FROM ernie;

+--------+---------+---------+
|  role  | member  | isAdmin |
+--------+---------+---------+
| design | barkley | false   |
| design | ernie   | false   |
| design | lucky   | false   |
+--------+---------+---------+

Pricing

Contact us

Sign In