|
Roles are removed from users and from other roles the same way that privileges are removed from users and from roles, through the REVOKE command as follows: REVOKE developer FROM larry; If you need to remove a role from the database rather than from the user, this is accomplished through the DROP ROLE command. When you drop a role, Oracle automatically revokes that role from all users and roles to which it has been granted and then removes it from the database. To drop the role (DROP ROLE rolename;) from the database, you need to have been granted the role WITH ADMIN OPTION or have the DROP ANY ROLE system privilege. Several predefined roles come with the database when it is created. These roles are outlined in the following section. |
|