GRANT SELECT ON [dbo].[someTable] TO [aUser]; REVOKE SELECT ON [dbo].[someTable] TO [aUser]; --REVOKE SELECT [dbo].[someTable] FROM [aUser]; is equivalent DENY SELECT ON [dbo].[someTable] TO [aUser];