DROP USER

Removes a user identity. The Control Plane cascades the removal: role grants and direct object grants targeting the user are revoked.

Category: securityPrivilege: ManageUsersDeltaForge extension

Syntax

DROP USER [IF EXISTS] <name>

Description

## Overview DROP USER removes a user from the RBAC catalog. The Control Plane cascades the removal across all RBAC tables that reference the user. ## Behavior - Without IF EXISTS, dropping a non-existent user raises an error. With IF EXISTS, the operation succeeds silently and reports `User '<name>' does not exist (IF EXISTS specified).`. - Cascading removal: the Control Plane revokes all role grants assigned to the user, removes group memberships, and removes direct object grants targeting the user. The cascade is performed by the Control Plane in a single transaction. - The user's session, if any, is not invalidated by this command. Active sessions continue until they expire or are revoked through session management. ## Access Control Requires the `ManageUsers` privilege. ## Compatibility DeltaForge extension.

Parameters

Name	Type	Description
`name`		Specifies the user to drop.
`if_exists`		Skip silently when the user does not exist.

Examples

DROP USER alice;

DROP USER IF EXISTS alice;

Pitfalls

Dropping a user does not invalidate active sessions for that user. Tokens issued before the drop remain valid until they expire. Use the Control Plane session-management endpoints to force termination if immediate revocation is required.