Database.Revoke Method (DatabasePermissionSet, String, Boolean, Boolean)

 

Revokes previously granted permissions from a grantee on the database and any other users to whom the grantee has granted the specified set of permissions. The grantee is also given the ability to revoke the specified set of permissions from other users under an assumed role.

Namespace:   Microsoft.SqlServer.Management.Smo
Assembly:  Microsoft.SqlServer.Smo (in Microsoft.SqlServer.Smo.dll)

C#
C++
F#
VB
Copy 
member Revoke : 
        permission:DatabasePermissionSet *
        granteeName:string *
        revokeGrant:bool *
        cascade:bool -> unit

Parameters

permission
Type: Microsoft.SqlServer.Management.Smo.DatabasePermissionSet

A DatabasePermissionSet object value that specifies the set of permissions.

granteeName
Type: System.String

A String value that specifies a grantee to be revoked the set of permissions.

revokeGrant
Type: System.Boolean

A Boolean property that specifies whether the grantee is given the ability to revoke the specified set of permissions from other users on the database.

If True, the grantee is given the ability to revoke the specified set of permissions from other users on the database.

If False, the grantee is not given the ability to revoke the specified set of permissions from other users on the database.

cascade
Type: System.Boolean

A Boolean property that specifies whether users, to whom the grantee has granted the specified set of permissions, are also revoked the set of permissions.

If True, the grantee and users to whom the grantee granted the specified set of permission are all revoked the specified set of permissions on the database.

If False, only the grantee is revoked the specified set of permissions.

The example shows how to use the Revoke method with server permissions. The method is the same for database permissions.

VB

PowerShell

Copy 
$srv = new-Object Microsoft.SqlServer.Management.Smo.Server("(local)")
$arg = [Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint

$sps = new-object Microsoft.SqlServer.Management.Smo.ServerPermissionSet([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)
$sps.Add([Microsoft.SqlServer.Management.Smo.ServerPermission]::AlterAnyEndpoint)
$spis = $srv.EnumServerPermissions("vGrantee", $sps)
Write-Host "=================Before revoke==========================="
Foreach ($spi In $spis)
{
   Write-Host $spi.Grantee "has" $spi.PermissionType " permission."
}
Write-Host " "
$sps.Remove([Microsoft.SqlServer.Management.Smo.ServerPermission]::CreateEndpoint)
Return to top
Show: