DBA can create roles with list of privileges then grant it to specific user. My question is Can I grant a role to user then revoke only specific privilege from user?
As example:
Here created role:
CREATE role MANAGER;
COMMIT;
GRANT select, insert, update, delete on employee to MANAGER;
GRANT select, insert, update, delete on job_title to MANAGER;
GRANT execute on payroll to MANAGER;
COMMIT;
Then I grant it for user:
GRANT MANAGER to user1;
COMMIT;
So can I doing this:
REVOKE update ON employee FROM user1;
??