Revoke entitlements in downstream apps
The following table describes the effects in Okta when user entitlements are revoked in a downstream app.
| Entitlements | Effect | 
|---|---|
| Microsoft Office 365 entitlements in Azure Active Directory | If a user's entitlements are revoked in Azure Active Directory (AD) and the user no longer has any assigned roles or licenses, Okta unassigns Microsoft Office 365 from the user on import. | 
| Box | 
 If a user's entitlements are revoked in one of these apps, their entitlements for the app are removed in Okta upon import. The app remains assigned to the user. 
 
 | 
| Google Workspace | |
| NetSuite | |
| Salesforce | 
