If a Resource Access Management (RAM) user no longer needs specific permissions or the RAM user leaves your organization, you can revoke the permissions from the RAM user. This topic describes how to revoke permissions from a RAM user.
After you revoke permissions from a RAM user, the RAM user no longer has the permissions to access specific resources. Before you revoke permissions from a RAM user, make sure that the operation meets your business requirements.
Method 1: Revoke permissions from a RAM user on the Users page
Log on to the RAM console as a RAM administrator.
In the left-side navigation pane, choose .
On the Users page, click the username of the RAM user that you want to manage.
On the page that appears, click the Permissions tab, find the policy that you want to detach from the RAM user, and then click Revoke Permission in the Actions column.
In the Revoke Permission message, click Revoke Permission.
Method 2: Revoke permissions from a RAM user on the Grants page
Log on to the RAM console as a RAM administrator.
In the left-side navigation pane, choose .
On the Permission page, find the authorization record that you want to manage and click Revoke Permission in the Actions column.
You can also select multiple authorization records and click Revoke Permission below the authorization record list to revoke multiple authorization records from multiple RAM users at a time.
In the Revoke Permission message, click Revoke Permission.