Description\n-----------\n\nThe REVOKE statement enables system administrators to revoke privileges (or roles - see section below) from MariaDB accounts. Each account is named using the same format as for the GRANT statement; for example, jeffrey@localhost. If you specify only the user name part of the account name, a host name part of % is used. For details on the levels at which privileges exist, the available priv_type and priv_level values, and the syntax for specifying users and passwords, see GRANT.\n\nTo use the first syntax (REVOKE ... ON ... FROM ...), you must have the GRANT OPTION privilege, and you must have the privileges that you are revoking. Also, remember to specify the ON clause (in many cases, ON . to revoke privileges for all objects):\n\n``sql\nREVOKE ALL ON . FROM 'myuser'@'localhost';\n`\n\nThis leaves the USAGE privilege, and can leave other privileges, too. For that reason, the second syntax (REVOKE ALL PRIVILEGES, GRANT OPTION FROM ...) is preferable, which drops all global, database, table, column, and routine privileges for the named user or users:\n\n`sql\nREVOKE ALL PRIVILEGES, GRANT OPTION FROM user [, user] ...\n`\n\nTo use this REVOKE syntax, you must have the global CREATE USER privilege or the UPDATE privilege for the mysql database. See GRANT. For that syntax, the ON . clause must not be used (it yields an error).\n\nRevoking all privileges doesn't remove _all_ privileges, not even with the second syntax. The user still keeps the USAGE privilege, making it possible to connect to the server (but nothing else). To remove that privilege, too, remove the user entirely with a DROP USER` statement.\n\nExamples\n--------\n\nREVOKE SUPER ON . FROM 'myuser'@'localhost';\n\nURL: https://mariadb.com/docs/server/reference/sql-statements/account-management-sql-statements/revoke