Removing a Grantee from a Standalone Role

Remove a user or role as a member (grantee) of a standalone role. Grantees lose the ability to use any underlying system privileges or roles of the standalone role.

Prerequisites

Database Version	Role-Based Standalone Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	Requires one of: Administrative rights over the role (role administrator). MANAGE ROLES system privilege if the role has a global role administrator.

The SAP Sybase IQ resource is authenticated and running.
The selected resource supports role-based security

Task

By default, a minimum of one role administrator (or global role administrator with a login password) for each role must exist at all times. This minimum requirement is validated before you can remove a member who is a role administrator from a role.

If revoking membership in a role would result in a failure to meet the minimum number of role administrators for the selected role, an error message appears, and the removal fails.

In the Perspective Resources view, select the resource and select Resource > Administration Console.
In the left pane, select IQ Servers > Security > Role-Based > Standalone Roles.
Select a role from the right pane and either:
- Click the arrow to the right of the name and select Manage Grantees, or
- From the Administration Console menu bar, select Resource > Manage Grantees.
  Warning! When removing a grantee which is also a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
A list of users and roles currently granted to the role appears.
Highlight a user or role to be removed from the standalone role and click Revoke.
Click OK.