Revoking access to an existing role/account/entitlement can be done immediately or in the future.
To revoke access immediately, select the role/account/entitlement from the corresponding table, and click Remove.
To revoke access on a future date, select the role/account/entitlement, and click Modify Grant Duration. In the Modify Grant Duration popup, set the End Date field to the date when the access should be revoked.