When a user changes jobs or leaves the company, the key custodian drops this user’s key copy with:
alter encryption key key_name drop encryption for user user_name
For example, if user Bill leaves the company, the key owner can prevent Bill’s access to key1 by dropping Bill’s key copy:
alter encryption key key1 drop encryption for user Bill
Adaptive Server does not require a password for this command because no key decryption is required. This command removes Bill's key copy row, which drops Bills access to the key.
drop encryption key drops the base key and all its copies.
