REVOKE SELECT on an encryption key from users or roles.


REVOKE KEY USAGE ON encryptionkey,...
FROM {username|rolename};


  • encryptionkey - an existing encryption key. You can add additional keys separated by commas.

  • username - Cirro user account name. Can be internal to CIRRO or an external Directory Service user.

  • rolename - Cirro Role.


REVOKE SELECT ON key1, key2 FROM USER cirrouser;

See also