Removing a Role from a Standalone Role

Remove an underlying role from a standalone role. Grantees of the standalone role lose the ability to use any system privileges of the underlying role or administer the underlying role.

Prerequisites
Database Version Role-Based Standalone Role Privileges
SAP Sybase IQ 15.3 and 15.4 Not supported.
SAP Sybase IQ 16.0 To enable the Manage Roles option requires one of:
  • Administrative rights over the role (role administrator).
  • MANAGE ROLES system privilege if the role has a global role administrator.

To then add an underlying system role requires MANAGE ROLES system privilege.

To then add an underlying user-defined or compatibility role requires one of:
  • Administrative rights over the underlying role (role administrator).
  • MANAGE ROLES system privilege if the underlying role has a global role administrator.
Task
  1. In the Perspective Resources view, select the resource and select Resource > Administration Console.
  2. In the left pane, select IQ Servers > Security > Role-Based > Standalone Roles.
  3. Select a standalone role from the right pane and either:
    • Click the arrow to the right of the name and select Manage Roles, or
    • From the Administration Console menu bar, select Resource > Manage Roles.
      Warning!  When removing an underlying role from a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
    A list of underlying roles currently granted to the standalone role appears.
  4. Highlight a role to be removed and click Revoke.
  5. Click OK.
Related concepts
Manage Standalone Role Administrators
Manage Global Role Administrators of a Standalone Role
Security Implications of the Managing Grantees and Managing Roles Options
Related tasks
Creating a Standalone Role
Deleting a Standalone Role
Adding a Grantee to a Standalone Role
Changing a Grantee's Administrative Rights on a Standalone Role
Removing a Grantee from a Standalone Role
Adding a Role to a Standalone Role
Changing Administrative Rights on an Underlying Role of a Standalone Role
Adding a System Privilege to a Standalone Role
Changing Administrative Rights on a Privilege Granted to a Standalone Role
Removing a System Privilege from a Standalone Role
Generating Standalone Role DDL Commands
Viewing or Modifying Role-Based Standalone Role Properties
Authenticating a Login Account for a Managed Resource
Related reference
Role-Based Standalone Role Privilege Summary