Open the person’s access record and suspend or remove their membership. Suspending is useful when access may be restored; removal is appropriate when the relationship has ended.
Review active sessions and devices at the same time. Revoke anything that should no longer be trusted rather than waiting for it to expire.
Removing a cloud membership does not mean deleting the person’s Portico Account. It removes that account’s authority for this server. The server should deny new server-scoped access as soon as the updated policy is enforced.
Keep audit information according to the server’s retention policy so the owner can understand when access changed without retaining unnecessary personal data forever.