On this page 
Warning:
CockroachDB v2.0 is no longer supported as of October 4, 2019. For more details, refer to the Release Support Policy.
New in v2.0: The REVOKE <roles> statement lets you revoke a role or user's membership to a role.
Synopsis
Required Privileges
The user revoking role membership must be a role admin (i.e., members with the ADMIN OPTION) or a superuser (i.e., a member of the admin role).
Considerations
- The
rootuser cannot be revoked from theadminrole.
Parameters
| Parameter | Description |
|---|---|
ADMIN OPTION |
Revoke the user's role admin status. |
role_name |
The name of the role from which you want to remove members. To revoke members from multiple roles, use a comma-separated list of role names. |
user_name |
The name of the user or role from whom you want to revoke membership. To revoke multiple members, use a comma-separated list of user and/or role names. |
Examples
Revoke Role Membership
> SHOW GRANTS ON ROLE design;
+--------+---------+---------+
| role | member | isAdmin |
+--------+---------+---------+
| design | barkley | false |
| design | ernie | true |
| design | lola | false |
| design | lucky | false |
+--------+---------+---------+
> REVOKE design FROM lola;
> SHOW GRANTS ON ROLE design;
+--------+---------+---------+
| role | member | isAdmin |
+--------+---------+---------+
| design | barkley | false |
| design | ernie | true |
| design | lucky | false |
+--------+---------+---------+
Revoke the Admin Option
To revoke a user or role's admin option from a role (without revoking the membership):
> REVOKE ADMIN OPTION FOR design FROM ernie;
+--------+---------+---------+
| role | member | isAdmin |
+--------+---------+---------+
| design | barkley | false |
| design | ernie | false |
| design | lucky | false |
+--------+---------+---------+
See Also
- Privileges
GRANT <roles>(Enterprise)GRANT <privileges>REVOKE <privileges>SHOW GRANTSSHOW ROLESCREATE USERDROP USER- Roles
- Other SQL Statements
Was this helpful?
