16.21. REVOKE

Synopsis

REVOKE [ GRANT OPTION FOR ]
( privilege [, ...] | ALL PRIVILEGES )
ON [ TABLE ] table_name FROM ( grantee | PUBLIC )

Usage of the term grantee denotes both users and roles.

Revokes the specified privileges from the specified grantee.

Specifying ALL PRIVILEGES revokes DELETE, INSERT and SELECT privileges.

Specifying PUBLIC revokes privileges from all grantees.

The optional GRANT OPTION FOR clause also revokes the privileges to grant the specified privileges.

For REVOKE statement to succeed, the user executing it should possess the specified privileges as well as the GRANT OPTION for those privileges.

REVOKE is currently supported only for hive connector.

Revoke INSERT and SELECT privileges on the table orders from user alice:

REVOKE
INSERT, SELECT
ON orders FROM alice;

Revoke SELECT privilege on the table nation from everyone, additionally revoking the privilege to grant SELECT privilege:

REVOKE GRANT OPTION FOR
SELECT
ON nation FROM PUBLIC;

REVOKE all privileges on the table test from user alice:

REVOKE
ALL PRIVILEGES
ON test FROM alice;