RESTRICT

Denies the permission on a resource, even if the role is directly granted or inherits permissions.

For complete syntax and examples, see the CQL Language Reference.