GRANT and REVOKE

Use GRANT to give access and REVOKE to remove it.

GRANT SELECT, INSERT ON employees TO analyst;
REVOKE INSERT ON employees FROM analyst;

Can also grant roles.

GRANT hr_role TO analyst;