Revoke, deactivate or delete?
Revoke ends a credential or session. Deactivate suspends account access. Delete starts a policy-governed removal process, with a clear explanation of any required retention.
Workspace ownership, shared publishing assets and connected platform permissions require a separate impact review before account deletion.