Revoke entitlements in downstream apps

The following table describes the effects in Okta when user entitlements are revoked in a downstream app.

Entitlements Effect
Microsoft Office 365 entitlements in Azure Active Directory If a user's entitlements are revoked in Azure Active Directory (AD) and the user no longer has any assigned roles or licenses, Okta unassigns Microsoft Office 365 from the user on import.


If a user's entitlements are revoked in one of these apps, their entitlements for the app are removed in Okta upon import. The app remains assigned to the user.

Google Workspace



Related topics


Manage entitlements