If a user can grant a privilege on a specific privilege object is determined by several rules depending on the privilege object type. Below you find the rules that have to be matched for removing  privileges from different privilege object types.

System privileges

A system privilege can be granted by a user if all of the following conditions are matched:

1.The user who tries to grant the privilege has the Modify system privileges (2) system permission.

2.The permission that is granted through the privilege to is granted to the user who tries to grant a privilege.

View Privileges

A view privilege can be granted for views if all of the following conditions are matched:

1.The user who tries to grant the privilege has the Modify view privileges (4) permission on the view that is privilege object of the privilege to be granted.

2.The user who tries to grant the privilege has the permission he is trying to grant through the new privilege  himself. Note that the permissions on root view can be transformed from the system permission All permissions on root views (1).

Domain privileges

A domain privilege can be granted if:

1.The user who tries to grant the privilege has the Modify privileges (3) permission on the domain that is the privilege object.

2.The user who tries to grant the privilege has the permission that he is trying to grant himself on the domain that is the privilege object.

Feature privileges

A feature privilege can be granted if:

1.The user who tries to grant the privilege has Modify privileges (8) permission on that feature.

2.The user who is trying to grant the new privilege, must have the permission in that privilege on the feature himself

Feature type privileges

A feature type privilege can be granted if:

1.The user who tries to grant the privilege has the Modify feature type privileges (23) system permission modify feature type privileges.

2.The user who tries to grant the privilege has the permission that he is trying to grant himself on the feature type that is the privilege object. Note that you can use the All permissions on feature types system permission to grant all feature type permissions on all feature types to a permission subject.