Skip to main content
URL: http://<db.host>:<db.port>/revoke/permission
Revoke user or role the specified permission on the specified object.

​
Input Parameter Description

​
principal
string
Name of the user or role for which the permission is being revoked. Must be an existing user or role.The default value is ”.
​
object
string
Name of object permission is being revoked from. It is recommended to use a fully-qualified name when possible.
​
object_type
string
The type of object being revoked.
  • catalog: Catalog
  • context: Context
  • credential: Credential
  • datasink: Data Sink
  • datasource: Data Source
  • directory: KIFS File Directory
  • graph: A Graph object
  • proc: UDF Procedure
  • schema: Schema
  • sql_proc: SQL Procedure
  • system: System-level access
  • table: Database Table
  • table_monitor: Table monitor
​
permission
string
Permission being revoked.
  • admin: Full read/write and administrative access on the object.
  • connect: Connect access on the given data source or data sink.
  • create: Ability to create new objects of this type.
  • delete: Delete rows from tables.
  • execute: Ability to Execute the Procedure object.
  • insert: Insert access to tables.
  • monitor: Monitor logs and statistics.
  • read: Ability to read, list and use the object.
  • send_alert: Ability to send system alerts.
  • update: Update access to the table.
  • user_admin: Access to administer users and roles that do not have system_admin permission.
  • write: Access to write, change and delete objects.
​
options
map of string to strings
Optional parameters.The default value is an empty map ( {} ).

​
Output Parameter Description

The Kinetica server embeds the endpoint response inside a standard response structure which contains status information and the actual response to the query. Here is a description of the various fields of the wrapper:
​
status
String
‘OK’ or ‘ERROR’
​
message
String
Empty if success or an error message
​
data_type
String
‘revoke_permission_response’ or ‘none’ in case of an error
​
data
String
Empty string
​
data_str
JSON or String
This embedded JSON represents the result of the /revoke/permission endpoint:Empty string in case of an error.