Skip to main content

# kater admin access revoke

Removes a grant given on a file or folder itself.

{/* Written by apps/landing-page/scripts/docs/write_cli_reference.py from the kater CLI's own help and scripts/docs/cli-reference.md. Do not edit it by hand: change those, then run the script. */}

Access that a person inherits from a folder above stays, so revoke it on that folder instead. `kater admin access show` names the folder that each inherited grant comes from.

## Examples

```bash
# Remove one person's grant on the ad_reporting workspace
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --user teammate@example.com
# Remove the Marketing group's grant on the workspaces folder
kater admin access revoke connections/snowflake_prod_connection/workspaces --group Marketing
# Remove the grant that lets everyone view the workspace
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --everyone
```

## Arguments

<div class="cli-options">

| Argument | Description |
| --- | --- |
| `<path>` | The file or folder that the grant is on, from the content root, such as `connections/snowflake_prod_connection/workspaces/ad_reporting`. |

</div>

## Options

<div class="cli-options">

| Option | Description |
| --- | --- |
| `--user <user>` | A member, by email address or user id, such as `teammate@example.com`. |
| `--group <group>` | A group, by name or id, such as `Marketing`. |
| `--everyone` | Removes the grant to everyone in the organisation. |

</div>

It also takes the [global options](https://kater.ai/docs/cli-reference/global-options/) `--json` and `--help`.

## When there is no grant to remove

Give one of `--user`, `--group` or `--everyone`, and only one. When the grantee has no grant on the path itself, the command stops. It also says when their access is inherited.

You need the Manager level on the path, or the `access:administer` permission.

## See also

- [`kater admin access`](https://kater.ai/docs/cli-reference/admin/access/)
- [All commands](https://kater.ai/docs/cli-reference/kater/)

On this page

Examples
Arguments
Options
When there is no grant to remove
See also

Kater CLI Share and administer admin access

kater admin access revoke

Removes a grant given on a file or folder itself.

Access that a person inherits from a folder above stays, so revoke it on that folder instead. kater admin access show names the folder that each inherited grant comes from.

Examples

# Remove one person's grant on the ad_reporting workspace
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --user teammate@example.com
# Remove the Marketing group's grant on the workspaces folder
kater admin access revoke connections/snowflake_prod_connection/workspaces --group Marketing
# Remove the grant that lets everyone view the workspace
kater admin access revoke connections/snowflake_prod_connection/workspaces/ad_reporting --everyone

Arguments

Argument	Description
`<path>`	The file or folder that the grant is on, from the content root, such as `connections/snowflake_prod_connection/workspaces/ad_reporting`.

Options

Option	Description
`--user <user>`	A member, by email address or user id, such as `teammate@example.com`.
`--group <group>`	A group, by name or id, such as `Marketing`.
`--everyone`	Removes the grant to everyone in the organisation.

It also takes the global options --json and --help.

When there is no grant to remove

Give one of --user, --group or --everyone, and only one. When the grantee has no grant on the path itself, the command stops. It also says when their access is inherited.

You need the Manager level on the path, or the access:administer permission.

See also