REVOKE DATA ROLE

Purpose

Use REVOKE DATA ROLE to revoke data roles from grantees.

Prerequisites

You must have the GRANT ANY DATA ROLE system privilege to execute this command.

You can use the DBA_DATA_ROLE_GRANTS dictionary view to query existing data role grants.

Syntax

Description of the illustration revoke_data_role.gif

revokee_list::=

Description of the illustration revokee_list.gif

revokee::=

Description of the illustration revokee.gif

Semantics

• IF EXISTS: If you specify IF EXISTS and the data role does not exist, no error is thrown. If the data role exists, then it will be revoked.

  If you do not specify IF EXISTS, and the data role does not exist, an error is thrown. If the data role exists, then it will be revoked.

• data_role_list: the names of data roles to be revoked.

• revokee_list: the names of the end users, application identities, or data roles from which data roles need to be revoked.

Example

The following SQL statement revokes the data role manager_role from the end user marvin:

REVOKE DATA ROLE manager_role FROM marvin;