Reference
Version · 6.0
Change Automation Reference

revokePrivilegeFromShare

Last updated: August 12, 2026

Revokes a privilege on a database object from a Snowflake share. This removes the share's access to the specified object.

Note: Automatic rollback grants the privilege back.

Known limitation: This change type does not support database inspection features (snapshot, diff, diff-changelog, and generate-changelog commands).

Available attributes

Attribute	Type	Description	Required
`shareName`	String	Name of the share to revoke the privilege from	Yes
`objectType`	String	Type of object to revoke privilege on*	Yes
`objectName`	String	Name of the object to revoke privilege on	Yes
`catalogName`	String	Name of the catalog (database) containing the object**	No
`schemaName`	String	Name of the schema containing the object***	No
`privilege`	String	Privilege to revoke (see table below)	Yes

* Supported types: DATABASE, SCHEMA, TABLE, EXTERNAL_TABLE, ICEBERG_TABLE, DYNAMIC_TABLE, VIEW, FUNCTION, TAG, SEMANTIC_VIEW

** Cannot be specified for DATABASE type.

*** Cannot be specified for DATABASE or SCHEMA types.

Privileges by object type

Object type	Valid privileges
DATABASE	USAGE, REFERENCE_USAGE
SCHEMA	USAGE
TABLE	SELECT, EVOLVE SCHEMA
EXTERNAL_TABLE	SELECT
ICEBERG_TABLE	SELECT
DYNAMIC_TABLE	SELECT
VIEW	SELECT
FUNCTION	USAGE
TAG	READ
SEMANTIC_VIEW	REFERENCES

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
        xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
        xmlns:pro-snowflake="http://www.liquibase.org/xml/ns/pro-snowflake"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/pro-snowflake
        http://www.liquibase.org/xml/ns/pro-snowflake/liquibase-pro-snowflake-latest.xsd">

    <!-- Revoke SELECT on table -->
    <changeSet id="revoke-table-select" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="TABLE"
                objectName="CUSTOMERS"
                catalogName="MY_DATABASE"
                schemaName="PUBLIC"
                privilege="SELECT"/>
    </changeSet>

    <!-- Revoke SELECT on view -->
    <changeSet id="revoke-view-select" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="VIEW"
                objectName="CUSTOMER_SUMMARY"
                catalogName="MY_DATABASE"
                schemaName="PUBLIC"
                privilege="SELECT"/>
    </changeSet>

    <!-- Revoke USAGE on schema -->
    <changeSet id="revoke-schema-usage" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="SCHEMA"
                objectName="PUBLIC"
                catalogName="MY_DATABASE"
                privilege="USAGE"/>
    </changeSet>

    <!-- Revoke USAGE on database -->
    <changeSet id="revoke-database-usage" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="DATABASE"
                objectName="MY_DATABASE"
                privilege="USAGE"/>
    </changeSet>

</databaseChangeLog>

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "revoke-table-select",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "TABLE",
              "objectName": "CUSTOMERS",
              "catalogName": "MY_DATABASE",
              "schemaName": "PUBLIC",
              "privilege": "SELECT"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "revoke-schema-usage",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "SCHEMA",
              "objectName": "PUBLIC",
              "catalogName": "MY_DATABASE",
              "privilege": "USAGE"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "revoke-database-usage",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "DATABASE",
              "objectName": "MY_DATABASE",
              "privilege": "USAGE"
            }
          }
        ]
      }
    }
  ]
}

databaseChangeLog:
  # Revoke SELECT on table
  - changeSet:
      id: revoke-table-select
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: TABLE
            objectName: CUSTOMERS
            catalogName: MY_DATABASE
            schemaName: PUBLIC
            privilege: SELECT

  # Revoke USAGE on schema
  - changeSet:
      id: revoke-schema-usage
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: SCHEMA
            objectName: PUBLIC
            catalogName: MY_DATABASE
            privilege: USAGE

  # Revoke USAGE on database
  - changeSet:
      id: revoke-database-usage
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: DATABASE
            objectName: MY_DATABASE
            privilege: USAGE

--liquibase formatted sql

--changeset examples:revoke-select-on-table
-- Revoke SELECT on table
REVOKE SELECT ON TABLE MY_DATABASE.PUBLIC.CUSTOMERS FROM SHARE MY_SHARE;

--changeset examples:revoke-select-on-view
-- Revoke SELECT on view
REVOKE SELECT ON VIEW MY_DATABASE.PUBLIC.CUSTOMER_SUMMARY FROM SHARE MY_SHARE;

--changeset examples:revoke-usage-on-schema
-- Revoke USAGE on schema
REVOKE USAGE ON SCHEMA MY_DATABASE.PUBLIC FROM SHARE MY_SHARE;

--changeset examples:revoke-usage-on-database
-- Revoke USAGE on database
REVOKE USAGE ON DATABASE MY_DATABASE FROM SHARE MY_SHARE;

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
        xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
        xmlns:pro-snowflake="http://www.liquibase.org/xml/ns/pro-snowflake"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/pro-snowflake
        http://www.liquibase.org/xml/ns/pro-snowflake/liquibase-pro-snowflake-latest.xsd">

    <!-- Revoke SELECT on table -->
    <changeSet id="revoke-table-select" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="TABLE"
                objectName="CUSTOMERS"
                catalogName="MY_DATABASE"
                schemaName="PUBLIC"
                privilege="SELECT"/>
    </changeSet>

    <!-- Revoke SELECT on view -->
    <changeSet id="revoke-view-select" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="VIEW"
                objectName="CUSTOMER_SUMMARY"
                catalogName="MY_DATABASE"
                schemaName="PUBLIC"
                privilege="SELECT"/>
    </changeSet>

    <!-- Revoke USAGE on schema -->
    <changeSet id="revoke-schema-usage" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="SCHEMA"
                objectName="PUBLIC"
                catalogName="MY_DATABASE"
                privilege="USAGE"/>
    </changeSet>

    <!-- Revoke USAGE on database -->
    <changeSet id="revoke-database-usage" author="examples">
        <pro-snowflake:revokePrivilegeFromShare
                shareName="MY_SHARE"
                objectType="DATABASE"
                objectName="MY_DATABASE"
                privilege="USAGE"/>
    </changeSet>

</databaseChangeLog>

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "revoke-table-select",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "TABLE",
              "objectName": "CUSTOMERS",
              "catalogName": "MY_DATABASE",
              "schemaName": "PUBLIC",
              "privilege": "SELECT"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "revoke-schema-usage",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "SCHEMA",
              "objectName": "PUBLIC",
              "catalogName": "MY_DATABASE",
              "privilege": "USAGE"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "revoke-database-usage",
        "author": "examples",
        "changes": [
          {
            "revokePrivilegeFromShare": {
              "shareName": "MY_SHARE",
              "objectType": "DATABASE",
              "objectName": "MY_DATABASE",
              "privilege": "USAGE"
            }
          }
        ]
      }
    }
  ]
}

databaseChangeLog:
  # Revoke SELECT on table
  - changeSet:
      id: revoke-table-select
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: TABLE
            objectName: CUSTOMERS
            catalogName: MY_DATABASE
            schemaName: PUBLIC
            privilege: SELECT

  # Revoke USAGE on schema
  - changeSet:
      id: revoke-schema-usage
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: SCHEMA
            objectName: PUBLIC
            catalogName: MY_DATABASE
            privilege: USAGE

  # Revoke USAGE on database
  - changeSet:
      id: revoke-database-usage
      author: examples
      changes:
        - revokePrivilegeFromShare:
            shareName: MY_SHARE
            objectType: DATABASE
            objectName: MY_DATABASE
            privilege: USAGE

--liquibase formatted sql

--changeset examples:revoke-select-on-table
-- Revoke SELECT on table
REVOKE SELECT ON TABLE MY_DATABASE.PUBLIC.CUSTOMERS FROM SHARE MY_SHARE;

--changeset examples:revoke-select-on-view
-- Revoke SELECT on view
REVOKE SELECT ON VIEW MY_DATABASE.PUBLIC.CUSTOMER_SUMMARY FROM SHARE MY_SHARE;

--changeset examples:revoke-usage-on-schema
-- Revoke USAGE on schema
REVOKE USAGE ON SCHEMA MY_DATABASE.PUBLIC FROM SHARE MY_SHARE;

--changeset examples:revoke-usage-on-database
-- Revoke USAGE on database
REVOKE USAGE ON DATABASE MY_DATABASE FROM SHARE MY_SHARE;

PreviousRenameWarehouse NextRevokeRole

revokePrivilegeFromShare

Available attributes

Privileges by object type

XML

JSON

YAML

SQL

More like this