REVOKE [ ADMIN OPTION FOR ] role_name [, ...] FROM ( user | USER user | ROLE role) [, ...] [ GRANTED BY ( user | USER user | ROLE role | CURRENT_USER | CURRENT_ROLE ) ] [ IN catalog ]
Revokes the specified role(s) from the specified principal(s).
ADMIN OPTION FOR clause is specified, the
GRANT permission is
revoked instead of the role.
REVOKE statement for roles to succeed, the user executing it either should
be the role admin or should possess the
GRANT option for the given role.
GRANTED BY clause causes the role(s) to be revoked with
the specified principal as a revoker. If the
GRANTED BY clause is not
specified, the roles are revoked by the current user as a revoker.
IN catalog clause revokes the roles in a catalog as opposed
to a system roles.
bar from user
REVOKE bar FROM USER foo;
Revoke admin option for roles
foo from user
baz and role
REVOKE ADMIN OPTION FOR bar, foo FROM USER baz, ROLE qux;
Some connectors do not support role management. See connector documentation for more details.