REVOKE

    user_identity:

    You can also revoke the permission of the specified ROLE, which must exist for execution.

    REVOKE