revokeRolesFromUser (Revoke Roles)
Last updated: 2026-10-09
revokeRolesFromUser (Revoke Roles)
revokeRolesFromUser removes the listed roles from a user while keeping the rest. Revocation takes effect immediately; if all roles are removed, the user can only authenticate. In mongosh call db.revokeRolesFromUser(user, roles). Requires userAdmin or root.
| Category | User Authentication |
|---|---|
| MongoDB Version | 1.0+ |
| Example Language | mongosh (Shell) |
📝 Syntax
db.revokeRolesFromUser("<username>", [ { role: "read", db: "shop" } ])⚙️ Parameters
| roles | Roles to remove; the rest are kept |
|---|
Returns：Returns { ok: 1 } on success
▶ Example
Run the commands below in your local mongosh (requires a running mongod):
// revokeRolesFromUser: remove a read role
use admin
db.revokeRolesFromUser('reader', [
{ role: 'read', db: 'analytics' }
])Output：
{ ok: 1 }📌 Notes
- Only the listed roles are removed; others stay
- With no roles left, the user cannot perform any operation
- Takes effect immediately — no restart needed
🏷️ Related Tags
💡 Related Cases
More hands-on cases coming soon.
📚 Related Tutorials
❓ FAQ
QDoes revocation take effect immediately?
AYes — the server applies it right away, no restart.
QCan I revoke every role a user has?
AYes — the user can then authenticate but nothing else.
QWhat privileges does this need?
AuserAdmin or root.
