This topic describes how to remove the existing access permissions on an account in a resource directory from a user or group.


  1. Log on to the CloudSSO console.
  2. In the left-side navigation pane, click Multi-account Permission Configuration.
  3. On the Multi-account Permission Configuration page, click the name of the required account.
  4. On the page that appears, click the Access Assignments tab.
  5. Find the required user or group and click Remove in the Actions column.
  6. In the Remove Access Assignments panel, click Confirm Removal.
    When you remove the access permissions from the last CloudSSO identify that uses the access configuration, you can also de-provision the access configuration.
  7. Click Close.