"must revoke grants of external roles to this role/user"
*Cause: The user or role altered to IDENTIFIED GLOBALLY has
external roles directly granted - these must be revoked, since
external roles cannot be granted to global users or roles.
*Action: Use REVOKE to revoke the external roles from the user or role
to be ALTERed.