Please use the form below to provide your feedback. Because your feedback is valuable to us, the information you submit in this form is recorded in our issue tracking system (JIRA), which is publicly available. You can track the status of your feedback using the ticket number displayed in the dialog once you submit the form.

REVOKE Statement

    The REVOKE statement allows revoking previously granted RBAC privileges or roles from specific users. It’s important to understand that REVOKE is the inverse of GRANT. Its purpose is to undo the effect of a prior GRANT.

    You can use REVOKE statements to manage privileges on the following Operational Insights objects:

    Database

    Revoke Database Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP DATABASE FROM USER user1, ROLE role1;

    Scope

    Revoke Scope Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP SCOPE FROM USER user1, ROLE role1;
REVOKE CREATE, DROP SCOPE IN DATABASE db FROM USER user1, ROLE role1;

    Collection

    Revoke Collection Diagram
    REVOKE

    Example:

    REVOKE SELECT, INSERT ON any COLLECTION FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON any COLLECTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON any COLLECTION IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE SELECT, INSERT ON COLLECTION col1 FROM USER user1, ROLE role1;
REVOKE CREATE, DROP COLLECTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP COLLECTION IN SCOPE db.dv FROM USER user1, ROLE role1;

    View

    Revoke View Diagram
    REVOKE

    Example:

    REVOKE SELECT ON any VIEW FROM USER user1, ROLE role1;
REVOKE SELECT ON any VIEW IN DATABASE db FROM USER user1, ROLE role1;
REVOKE SELECT ON any VIEW IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE SELECT ON VIEW view0 FROM USER user1, ROLE role1;
REVOKE CREATE, DROP VIEW IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP VIEW IN SCOPE db.dv FROM USER user1, ROLE role1;

    Index

    Revoke Index Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP INDEX ON any COLLECTION FROM USER user1, ROLE role1;
REVOKE CREATE, DROP INDEX ON any COLLECTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP INDEX ON any COLLECTION IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE CREATE, DROP INDEX ON COLLECTION col1 FROM USER user1, ROLE role1;

    Function

    Revoke Function Diagram
    REVOKE

    Example:

    REVOKE EXECUTE ON any FUNCTION FROM USER user1, ROLE role1;
REVOKE EXECUTE ON any FUNCTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE EXECUTE ON any FUNCTION IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE EXECUTE ON FUNCTION func FROM USER user1, ROLE role1;
REVOKE CREATE, DROP FUNCTION FROM USER user1, ROLE role1;
REVOKE CREATE, DROP FUNCTION IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP FUNCTION IN SCOPE db.dv FROM USER user1, ROLE role1;

    Library

    Revoke Library Diagram
    REVOKE

    Example:

    REVOKE USAGE ON any LIBRARY FROM USER user1, ROLE role1;
REVOKE USAGE ON any LIBRARY IN DATABASE db FROM USER user1, ROLE role1;
REVOKE USAGE ON any LIBRARY IN SCOPE db.dv FROM USER user1, ROLE role1;
REVOKE USAGE ON LIBRARY db.dv.lib FROM USER user1, ROLE role1;
    Revoke Link Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP, ALTER LINK FROM USER user1, ROLE role1;
REVOKE CONNECT, DISCONNECT ON any LINK FROM USER user1, ROLE role1;
REVOKE DISCONNECT ON any LINK link0 FROM USER user1, ROLE role1;

    Role

    Revoke Role Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP ROLE FROM USER user1, ROLE role1;

    Synonym

    Revoke Synonym Diagram
    REVOKE

    Example:

    REVOKE CREATE, DROP SYNONYM FROM USER user1, ROLE role1;
REVOKE CREATE, DROP SYNONYM IN DATABASE db FROM USER user1, ROLE role1;
REVOKE CREATE, DROP SYNONYM IN SCOPE db.dv FROM USER user1, ROLE role1;