Removes a one or more roles from a user on the database where the roles exist. The
revokeRolesFromUsercommand uses the following syntax:
The command has the following fields:
Field Type Description
string The user to remove roles from.
array The roles to remove from the user.
document Optional. The level of write concern for the modification. The
writeConcerndocument takes the same fields as the
To specify a role that exists in the same database where
revokeRolesFromUserruns, you can either specify the role with the name of the role:
Or you can specify the role with a document, as in:
To specify a role that exists in a different database, specify the role with a document.
accountUser01 user in the
products database has the following roles:
revokeRolesFromUser command removes the two of the user’s roles: the
read role on the
stock database and the
readWrite role on the
products database, which is also the database on which the command runs:
accountUser01 in the
products database now has only one remaining role: