Pre-General Availability Draft: 2017-10-20
DROP ROLE [IF EXISTS] role [, role ] ...
DROP ROLE removes one or more
roles (named collections of privileges). To use this statement,
you must have the global
privilege. When the
system variable is enabled,
ROLE additionally requires the
Roles named in the
mandatory_roles system variable
value cannot be dropped.
DROP ROLE either succeeds for all
named roles or rolls back and has no effect if any error occurs.
By default, an error occurs if you try to drop a role that does
not exist. If the
IF EXISTS clause is given,
the statement produces a warning for each named role that does
not exist, rather than an error.
The statement is written to the binary log if it succeeds, but
not if it fails; in that case, rollback occurs and no changes
are made. A statement written to the binary log includes all
named roles. If the
IF EXISTS clause is
given, this includes even roles that do not exist and were not
Each role name uses the format described in Section 6.2.5, “Specifying Role Names”. For example:
DROP ROLE 'administrator', 'developer'; DROP ROLE 'webapp'@'localhost';
The host name part of the role name, if omitted, defaults to
A dropped role is automatically revoked from any user account (or role) to which the role was granted. Within any current session for such an account, its privileges are adjusted for the next statement executed.