Privileges: GRANT and REVOKE

Available in: DSQL

Added in: 2.0

Description

Revokes a previously granted admin option (the right to pass on a granted role to others) from the grantee, without revoking the role itself. Multiple roles and/or multiple grantees can be handled in one statement.

Syntax

REVOKE ADMIN OPTION FOR <role-list> FROM <grantee-list>

<role-list>    ::= role [, role ...]
<grantee-list> ::= [USER] <grantee> [, [USER] <grantee> ...]
<grantee>      ::= username | PUBLIC

Example

revoke admin option for manager from john, paul, george, ringo

If a user has received the admin option from several grantors, each of those grantors must revoke it or the user will still be able to grant the role(s) in question to others.