Skip to content

acl:revoke

Revoke a role on an AccessControl contract (string roles, hashed with keccak256) or an AccessManager (numeric role ids).

acl:revoke <role> <on> <target> <from> <account>
NameTypeDescription
rolenumber | stringRole name (e.g. MINTER_ROLE), bytes32 value, or AccessManager role id
oncommandKeyword on
targetaddressAccessControl contract or AccessManager address
fromcommandKeyword from
accountaddressAccount to revoke from
load acl
set $token 0x9C58BAcC331c9aa871AFD802DB6379a98e80CEdb
set $manager 0xc0dbDcA66a0636236fAbe1B3C16B1bD4C84bB1E1
# AccessControl
acl:revoke MINTER_ROLE on $token from 0x4F2083f5fBede34C2714aFfb3105539775f7FE64
# AccessManager
acl:revoke 42 on $manager from 0x4F2083f5fBede34C2714aFfb3105539775f7FE64
  • Role resolution follows the same rules as acl:grant: string roles are AccessControl bytes32 roles, numeric ids are AccessManager roles.
  • The sender must hold the role's admin role.