Removing a Role from a System Role

Remove a role as an underlying role of a system role. Members of the system role lose the ability to use any system privileges of the underlying role.

Prerequisites

Database Version	Role-Based System Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	To enable the Manage Roles option – you must have the MANAGE ROLES system privilege. To then add an underlying role – you must have one of: Administrative rights over the underlying role (role administrator) MANAGE ROLES system privilege if the underlying role has a global role administrator

The SAP Sybase IQ resource is authenticated and running.
The selected resource supports role-based security

Task

Default underlying roles of a system role cannot be revoked.

In the Perspective Resources view, select the resource, and select Resource > Administration Console.
In the left pane, expand IQ Servers > Security > Role-Based, and then select System Roles.
Select a system role from the right pane and either:
- Click the arrow to the right of the name and select Manage Roles, or
- From the Administration Console menu bar, select Resource > Manage Roles.
  Warning! When removing an underlying role from a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
A list of underlying roles currently granted to the system role appears.
Highlight a role to be removed and click Revoke.

Note: The Revoke button is unavailable if the selected role is a default underlying role of the system role, or you do not have administrative rights to the role.
Do one of:
- Click OK to update any changes to the database and exit the properties view.
- Click Apply to update any changes to the database, but remain in the properties view.
- Click Cancel to cancel any changes not updated to the database and exit the properties view.