code: public void revoke(Grantee role) {
  
          if (!hasRoleDirect(role)) {
              throw Error.error(ErrorCode.X_0P503, role.getNameString());
          }
  
          roles.remove(role);
      }
docs: Revoke a direct role only