diff --git a/sql/instance_account.py b/sql/instance_account.py
index 83c968e284..90b824ba6c 100644
--- a/sql/instance_account.py
+++ b/sql/instance_account.py
@@ -158,6 +158,7 @@ def grant(request):
     """获取用户权限变更语句，并执行权限变更"""
     instance_id = request.POST.get('instance_id', 0)
     user_host = request.POST.get('user_host')
+    op_type = int(request.POST.get('op_type'))
     priv_type = int(request.POST.get('priv_type'))
     privs = json.loads(request.POST.get('privs'))
     grant_sql = ''
@@ -170,11 +171,12 @@ def grant(request):
         global_privs = privs['global_privs']
         if not all([global_privs]):
             return JsonResponse({'status': 1, 'msg': '信息不完整，请确认后提交', 'data': []})
-        if 'GRANT' in global_privs:
-            global_privs.remove('GRANT')
-            grant_sql = f"GRANT {','.join(global_privs)} ON *.* TO {user_host} WITH GRANT OPTION;"
-        else:
+        global_privs = ['GRANT OPTION' if g == 'GRANT' else g for g in global_privs]
+        if op_type == 0:
             grant_sql = f"GRANT {','.join(global_privs)} ON *.* TO {user_host};"
+        elif op_type == 1:
+            grant_sql = f"REVOKE {','.join(global_privs)} ON *.* FROM {user_host};"
+
     # 库权限
     elif priv_type == 1:
         db_privs = privs['db_privs']
@@ -182,11 +184,11 @@ def grant(request):
         if not all([db_privs, db_name]):
             return JsonResponse({'status': 1, 'msg': '信息不完整，请确认后提交', 'data': []})
         for db in db_name:
-            if 'GRANT' in db_privs:
-                db_privs.remove('GRANT')
-                grant_sql += f"GRANT {','.join(db_privs)} ON `{db}`.* TO {user_host} WITH GRANT OPTION;"
-            else:
+            db_privs = ['GRANT OPTION' if d == 'GRANT' else d for d in db_privs]
+            if op_type == 0:
                 grant_sql += f"GRANT {','.join(db_privs)} ON `{db}`.* TO {user_host};"
+            elif op_type == 1:
+                grant_sql += f"REVOKE {','.join(db_privs)} ON `{db}`.* FROM {user_host};"
     # 表权限
     elif priv_type == 2:
         tb_privs = privs['tb_privs']
@@ -195,11 +197,11 @@ def grant(request):
         if not all([tb_privs, db_name, tb_name]):
             return JsonResponse({'status': 1, 'msg': '信息不完整，请确认后提交', 'data': []})
         for tb in tb_name:
-            if 'GRANT' in tb_privs:
-                tb_privs.remove('GRANT')
-                grant_sql += f"GRANT {','.join(tb_privs)} ON `{db_name}`.`{tb}` TO {user_host} WITH GRANT OPTION;"
-            else:
+            tb_privs = ['GRANT OPTION' if t == 'GRANT' else t for t in tb_privs]
+            if op_type == 0:
                 grant_sql += f"GRANT {','.join(tb_privs)} ON `{db_name}`.`{tb}` TO {user_host};"
+            elif op_type == 1:
+                grant_sql += f"REVOKE {','.join(tb_privs)} ON `{db_name}`.`{tb}` FROM {user_host};"
     # 列权限
     elif priv_type == 3:
         col_privs = privs['col_privs']
@@ -209,7 +211,10 @@ def grant(request):
         if not all([col_privs, db_name, tb_name, col_name]):
             return JsonResponse({'status': 1, 'msg': '信息不完整，请确认后提交', 'data': []})
         for priv in col_privs:
-            grant_sql += f"GRANT {priv}(`{'`,`'.join(col_name)}`) ON `{db_name}`.`{tb_name}` TO {user_host};"
+            if op_type == 0:
+                grant_sql += f"GRANT {priv}(`{'`,`'.join(col_name)}`) ON `{db_name}`.`{tb_name}` TO {user_host};"
+            elif op_type == 1:
+                grant_sql += f"REVOKE {priv}(`{'`,`'.join(col_name)}`) ON `{db_name}`.`{tb_name}` FROM {user_host};"
 
     # 执行变更语句
     try:
diff --git a/sql/templates/instanceaccount.html b/sql/templates/instanceaccount.html
index 5757d94065..32af976c56 100644
--- a/sql/templates/instanceaccount.html
+++ b/sql/templates/instanceaccount.html
@@ -179,7 +179,16 @@ <h4 class="modal-title">授权变更
                                 </div>
                                 <div class="panel-body">
                                     <div class="form-group">
-                                        <h5 class="control-label text-bold">选择授权类型：</h5>
+                                        <h5 class="control-label text-bold">选择操作类型：</h5>
+                                        <div class="form-group">
+                                            <select id="op-type" name="op-type"
+                                                    class="selectpicker show-tick form-control bs-select-hidden"
+                                                    data-name="操作类型" title="请选择操作类型" required>
+                                                <option value="0" selected="selected">赋权</option>
+                                                <option value="1">回收</option>
+                                            </select>
+                                        </div>
+                                        <h5 class="control-label text-bold">选择权限类型：</h5>
                                         <div class="form-group">
                                             <select id="priv-type" name="priv-type"
                                                     class="selectpicker show-tick form-control bs-select-hidden"
@@ -1382,6 +1391,7 @@ <h4 class="modal-title">删除账号
 
             //变更账号权限
             $("#grantsBtn").unbind("click").click(function () {
+                let op_type = $("#op-type").val();
                 let priv_type = $("#priv-type").val();
                 let db_name = $("#db_name").val();
                 let tb_name = $("#tb_name").val();
@@ -1431,6 +1441,7 @@ <h4 class="modal-title">删除账号
                     data: {
                         instance_id: $("#instance").val(),
                         user_host: $("#modify-user").text(),
+                        op_type: op_type,
                         priv_type: priv_type,
                         privs: JSON.stringify(privs),
                         db_name: db_name,
@@ -1446,7 +1457,9 @@ <h4 class="modal-title">删除账号
                                 this.checked = false
                             });
                             $("#priv-type").val("0");
+                            $("#op-type").val("0");
                             $("#priv-type").trigger("change");
+                            $("#op-type").trigger("change");
                             user_list()
                         } else {
                             alert(data.msg);