DROP PRIVILEGE GROUP

Syntax

DROP PRIVILEGE GROUP pg-name [RESTRICT | CASCADE];

Description

The DROP PRIVILEGE GROUP statement removes a privilege group.

Parameters

pg-name
is the name of an existing explicit privilege group, an SQL identifier. It cannot be in the same format as a valid Guardian group name or an implicit privilege group name.
RESTRICT

If you specify this option, the privilege group is removed only if it is empty. This is the default option.

CASCADE
If you specify this option, the privilege group is removed and the group rights held by the members are revoked.

Considerations

The metadata for the system catalog must be 3500 or higher.

Authorization Requirements

  • To drop a privilege group, you must be one of the following:

    • Privilege group owner

    • Security Administrator

    • Super ID (if Super ID is a part of the Security Administrator’s group or if no Security Administrator’s group exists)

Example Command

To drop a privilege group with no members:
DROP PRIVILEGE GROUP temp_users;
To drop a privilege group with or without members:
DROP PRIVILEGE GROUP temp_users CASCADE;