Revoking a System Role

Revoke a system role from a user or role.

Prerequisites

Requires administrative privilege over the system role being revoked.

Task

To revoke a system role, execute one of these statements:

Administrative Option	Statement
Administrative rights to the role only	REVOKE ADMIN OPTION FOR ROLE `role_name` FROM `grantee [,...]`
Role membership and all administrative rights to the role	REVOKE ROLE `role_name` FROM `grantee [,...]`

Administrative Option

Statement

Administrative rights

to the role only

REVOKE ADMIN OPTION FOR ROLE role_name

FROM grantee [,...]

Role membership and

all administrative rights to the role

REVOKE ROLE role_name

FROM grantee [,...]

Examples:

This statement revokes SYS_AUTH_SA_ROLE entirely from Mary:

REVOKE ROLE SYS_AUTH_SA_ROLE FROM Mary

This statement revokes only administrative rights for SYS_AUTH_SSO_ROLE from Joe:

REVOKE ADMIN OPTION  FOR ROLE SYS_AUTH_SSO_ROLE FROM Mary