9.7.8.1 REVOKE PRIVILEGE

Purpose

The REVOKE PRIVILEGE command revokes privileges from a role.

Syntax

REVOKE PRIVILEGE { ALL ACTIONS | action } ON { ALL OBJECTS | object } { ALL ATTRIBUTES | ATTRIBUTES attribute1 [, attribute2...] } { WITH ALL OPTIONS | WITH OPTIONS option1 [, option2, ...] } FROM ROLE { ALL | role1 [, role2, ...] }

Usage Notes

• action is the command.

• object is object type for the action.

• attribute are the attributes for the object.

• option are the options for the object.

• role is the name of the role from which to revoke privileges.

• The ALL ACTIONS argument revokes privileges for all actions.

• The ALL OBJECTS argument revokes privileges for all objects.

• The ALL ATTRIBUTES argument revokes privileges for all attributes.

• The WITH ALL OPTIONS argument revokes privileges for all options.

Examples

Example 9-78 shows the REVOKE PRIVILEGE command.

Example 9-78 Revoking a Privilege

DBMCLI> REVOKE PRIVILEGE ALL ACTIONS ON ALL OBJECTS ALL ATTRIBUTES -
         WITH ALL OPTIONS FROM ROLE ALL

DBMCLI> REVOKE PRIVILEGE list ON dbserver ATTRIBUTES name     -
         WITH OPTIONS detail FROM ROLE db_monitor