To deny permissions use one of the following infacmd commands:
infacmd sql SetStoredProcedurePermissions. Denies Execute or Grant permissions at the stored procedure level.
infacmd sql SetTablePermissions. Denies Select and Grant permissions at the virtual table level.
infacmd sql SetColumnPermissions. Denies Select permission at the column level.
Each command has options to apply permissions (-ap) and deny permissions (-dp). The SetColumnPermissions command does not include the apply permissions option.
You cannot deny permissions from the Administrator tool.