<user-where> <user-revokeGlobalPermissions>