---
title: "REVOKE ROLE"
url: "https://docs.yugabyte.com/stable/api/ycql/ddl_revoke_role/"
---

# REVOKE ROLE

Use the `REVOKE ROLE` statement to revoke a role (which represents a group of permissions and the SUPERUSER status) from another role.

## Synopsis

Use the `REVOKE ROLE` statement to revoke a role (which represents a group of permissions and the SUPERUSER status) from another role.

This statement is enabled by setting the YB-TServer flag [--use\_cassandra\_authentication](/stable/reference/configuration/yb-tserver/#ycql "--use_cassandra_authentication") to `true`.

## Syntax

### Diagram

#### revoke\_role

REVOKE[role\_name](/stable/api/ycql/grammar_diagrams#role-name)FROM[role\_name](/stable/api/ycql/grammar_diagrams#role-name)

### Grammar

```ebnf
revoke_role ::= REVOKE ROLE role_name FROM role_name
```

Where

- `role_name` is a text identifier.

## Semantics

- Both roles must exist or an error will be raised.
- Permission `AUTHORIZE` on `ALL ROLES` or on the roles being used in the statement is necessary. Otherwise, an unauthorized error will be returned.
- You cannot revoke a role that hasn't been granted or an error will be raised.

## Examples

```sql
ycqlsh:example> REVOKE ROLE project_y from diana;
```

## See also

- [ALTER ROLE](/stable/api/ycql/ddl_alter_role "ALTER ROLE")
- [DROP ROLE](/stable/api/ycql/ddl_drop_role "DROP ROLE")
- [CREATE ROLE](/stable/api/ycql/ddl_create_role "CREATE ROLE")
- [GRANT ROLE](/stable/api/ycql/ddl_grant_role "GRANT ROLE")
- [GRANT PERMISSION](/stable/api/ycql/ddl_grant_permission "GRANT PERMISSION")
- [REVOKE PERMISSION](/stable/api/ycql/ddl_revoke_permission "REVOKE PERMISSION")