VMS Help SET, RIGHTS_LIST, Qualifiers, /DISABLE  *Conan The Librarian (sorry for the slow response - running on an old VAX)

    Removes the identifiers from the process or system rights list.
    You cannot use the /DISABLE qualifier with the /ENABLE qualifier.
    Note that removing more than ten identifiers in a single command
    invocation requires CMKRNL privilege.