syntax to remove permissions previously granted via GRANT EXECUTE?

Question

If I grant execute permissions to a role via

GRANT EXECUTE ON [DBO].[MYPROC] TO MY_ROLE

what's the equivalent syntax to remove them?

Solution 1

REVOKE EXECUTE ON [DBO].[MYPROC] TO MY_ROLE

Solution 2

DENY EXECUTE ON [DBO].[MYPROC] TO MY_ROLE

or

REVOKE EXECUTE ON [DBO].[MYPROC] TO MY_ROLE

depending on your goal. The first acts as a filter for any granted permissions, the second removes an explict permission.

Solution 3

DENY EXECUTE ON [DBO].[MYPROC] TO MY_ROLE