Translations:Manual:$wgRevokePermissions/4/en

$1 allows setting permissions for user groups. allows revocation of any of those permissions. Revoking a right with  takes precedence over granting it with. If the right is revoked for even one of the user's groups, they will not have it, regardless of whether it's explicitly permitted by other groups.