Revoking the USAGE privilege on a workload

Use the REVOKE USAGE ON WORKLOAD statement to revoke the USAGE privilege on a workload.

Before you begin

To use the REVOKE USAGE ON WORKLOAD statement, you require ACCESSCTRL, SECADM, or WLMADM authority.

See Workload management DDL statements for more information about prerequisites.

About this task

You cannot explicitly revoke the USAGE privilege on the SYSDEFAULTADMWORKLOAD workload. Only ACCESSCTRL, DATAACCESS, DBADM, SECADM, or WLMADM users who issue the SET WORKLOAD TO SYSDEFAULTADMWORKLOAD command can use this workload. Therefore, REVOKE USAGE ON WORKLOAD statements do not work for SYSDEFAULTADMWORKLOAD.

Procedure

To revoke the USAGE privilege on a workload:

  1. Use the REVOKE USAGE ON WORKLOAD statement.
    You can revoke the USAGE privilege from specific users, groups, roles, or PUBLIC. For example, to revoke the USAGE privilege on the ACCOUNTS workload from PUBLIC, you would specify the following statement:
    REVOKE USAGE ON WORKLOAD ACCOUNTS FROM PUBLIC
  2. Commit your changes.
    When you commit your changes, the SYSCAT.WORKLOADAUTH view is updated. Until the REVOKE statement is committed, the data server considers the workload when performing workload assignment.