Syntax for Securing Global Resources › REVOKE Administration Privilege › REVOKE Administration Privilege Usage

REVOKE Administration Privilege Usage

Revoking SYSADMIN from All Users

If the SYSA resource type is secured in the SRTT and SYSADMIN is revoked from all users and groups that hold SYSADMIN privilege, no user has the privilege to grant SYSADMIN and, therefore, no user has overall authority to administer the security system.

In this situation, you must turn off security for the SYSA resource type in the SRTT. With SYSA security off, any user can grant SYSADMIN privilege. Once you have granted the privilege to the appropriate users, you reactivate security for SYSA.

Revoking SYSADMIN from PUBLIC

This statement revokes SYSADMIN privilege from the group PUBLIC:

revoke sysadmin
  from public;