Removing a Role from a System Role

Remove a role as an underlying role of a system role. Members of the system role lose the ability to use any system privileges of the underlying role.

Prerequisites

Database Version	Role-Based System Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	To enable the Manage Roles option requires the MANAGE ROLES system privilege. To then add an underlying role requires one of: Administrative rights over the underlying role (role administrator). MANAGE ROLES system privilege if the underlying role has a global role administrator.

The SAP Sybase IQ resource is authenticated and running.
The selected resource supports role-based security

Task

Default underlying roles of a system role cannot be revoked.

In the Perspective Resources view, select the resource and select Resource > Administration Console.
In the left pane, select IQ Servers > Security > Role-Based > System Roles.
Select a system role from the right pane and either:
- Click the arrow to the right of the name and select Manage Roles, or
- From the Administration Console menu bar, select Resource > Manage Roles.
  Warning! When removing an underlying role from a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
A list of underlying roles currently granted to the system role appears.
Highlight a role to be removed and click Revoke.

Note: The Revoke button is unavailable if the selected role is a default underlying role of the system role, or you do not have administrative rights to the role.
Click OK.