Skip to main content
Revokes permissions from an organization role. REVOKE can also be used to revoke an organization role from another organization role or an identity (login or service account).

​
REVOKE PRIVILEGE

Revokes a permission from a role.
Only org_admin or a role owner can revoke a permission to a role.

​
Syntax

​
Parameters

​
Examples

Revoke MODIFY permission on an account The following command revokes the MODIFY permission on the account-1 account from the role account_manager, preventing it from making changes to the account:
Revoke MODIFY permissions on all accounts in the organization The following command revokes MODIFY permissions on all accounts in your organization from the role account_manager, preventing it from making changes to the accounts:

​
REVOKE ROLE

Revokes an organization role from an identity (login or service account) or from another organization role.

​
Syntax

​
Parameters

​
Example

Revoke a role from another role The following command removes the role_name role from role_name_2, revoking access to permissions granted to role_name:
Revoke a role from a login The following command revokes role role_name from a login "alexs@acme.com", removing the login’s access to the permissions granted by role_name:
Revoke a role from a service account The following command revokes role role_name from a service account service_account_name, removing the service account’s access to the permissions granted by role_name: