Removing a Role from a User-Extended Role

Remove a role as an underlying role of a user-extended role. Members of the user-extended role lose the ability to use any system privileges of the underlying role.

Prerequisites
Database Version Role-Based User-Extended Role Privileges
SAP Sybase IQ 15.3 and 15.4 Not supported.
SAP Sybase IQ 16.0 To enable the Manage Roles option requires one of:
  • Administrative rights over the role (role administrator).
  • MANAGE ROLES system privilege if the role has a global role administrator.

To then add an underlying system role requires MANAGE ROLES system privilege.

To then add an underlying user-defined or compatibility role requires one of:
  • Administrative rights over the underlying role (role administrator).
  • MANAGE ROLES system privilege if the underlying role has a global role administrator.
Task
  1. In the Perspective Resources view, select the resource and select Resource > Administration Console.
  2. In the left pane, select IQ Servers > Security > Role-Based > User-Extended Roles.
  3. Select a user-extended role from the right pane and either:
    • Click the arrow to the right of the name and select Manage Roles, or
    • From the Administration Console menu bar, select Resource > Manage Roles.
      Warning!  When removing an underlying role from a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
    A list of underlying roles currently granted to the user-extended role appears.
  4. Highlight a role to be removed and click Revoke.
    Note: The Revoke button is unavailable if you do not have administrative rights to the selected role.
  5. Click OK.
Related concepts
Manage Role Administrators of a User-Extended Role
Manage Global Role Administrators of a User-Extended Role
Security Implications of the Managing Grantees and Managing Roles Options
Related tasks
Creating a User-Extended Role
Deleting a User-Extended Role
Converting a User-Extended Role to a User
Adding a Grantee to a User-Extended Role
Changing a Grantee's Administrative Rights on a User-Extended Role
Removing a Grantee From a User-Extended Role
Adding a Role to a User-Extended Role
Changing Administrative Rights on an Underlying Role of a User-Extended Role
Adding a System Privilege to a User-Extended Role
Changing Administrative Rights on a User-Extended Role Granted Privilege
Removing a System Privilege from a User-Extended Role
Viewing or Modifying Role-Based User-Extended Role Options
Generating User-Extended Role DDL Commands
Viewing or Modifying User-Extended Role Properties
Changing a User-Extended Role Password
Forcing a User-Extended Role to Change their Password
Unlocking a User-Extended Role Account
Changing a User-Extended Role Login Policy
Authenticating a Login Account for a Managed Resource
Related reference
Role-Based User-Extended Role Privilege Summary