This document will walk you through the steps needed to create a PX Policy that will remove all of the provisioning roles from a user. You could use this PX Policy when disabling users who are no longer with your company, or any other use case that this is suited for in your business.
This PX Policy is an example intended for informational purposes and may or may not work exactly as configured in a live environment. The example policy shown below is set to fire on Modify User activity, and as shown will initiate on Task Submission.
In a Production environment you will probably want to configure a custom disable user task or something other than the Modify User task. If set up to run from the Modify User task you will need very specific entry rules to prevent this policy from removing the roles off of every user who you modify.