Revoke entitlements in downstream apps
The following table describes the effects in Okta when user entitlements are revoked in a downstream app.
|Microsoft Office 365 entitlements in Azure Active Directory
|If a user's entitlements are revoked in Azure Active Directory (AD) and the user no longer has any assigned roles or licenses, Okta unassigns Microsoft Office 365 from the user on import.
If a user's entitlements are revoked in one of these apps, their entitlements for the app are removed in Okta upon import. The app remains assigned to the user.