Grant permission on catalog but revoke from schema for the same user

[prasadvaze]

I have a catalog ( in unity catalog) containing multiple schemas.  I need an AD group to have select permission on all the schemas so at catalog level I granted Select to AD grp.  Then, I need to revoke permission on one particular schema in this catalog from the AD group ( actually a user in the AD grp).   I tried revoking schema-level access from the AD group and also from the user, but the group & user are still able to access.  Is there an issue?   

[Walter_C · Accepted solution]

This unfortunately is not possible due to the hierarchical mechanism in UC, you will need to grant permissions to the specific schemas directly and not by providing a major permission at the catalog level