The RESTRICT clause drops the specified user. If there are any references to this user in another ACL, then the DROP USER statement fails. The RESTRICT clause is the default.