Revoke access does not remove all users from an app

Products

• CASB Securlet SAAS

Issue/Introduction

In Securlet -> GSuite -> Apps, after clicking the Revoke Access button for an app, not all users are removed.

Cause

Users who remain have been removed from GSuite.

Resolution

If a user in GSuite has been removed, the user is still shown as having access to the app in CloudSOC. When the Revoke Access button is clicked, CloudSOC makes an API call to GSuite to remove access. If the user does not exist in GSuite, the revoke access will not remove the user from access as listed in CloudSOC.

This is being looked at by Broadcom engineering. Please open a support ticket for options to remove the users.