Reference
Revoking Permissions
Customers can revoke the App-Only or Delegated permissions granted to Rencore Governance at any point. For Microsoft services, revoking is done entirely on the Microsoft Entra side of your tenant, not from within Rencore Governance. Once revoked, the affected Environment will stop being able to scan the tenant until consent is granted again.
To revoke permissions granted to Rencore Governance:
- Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
- Browse to “Entra ID” and then “Enterprise Applications”.
- Select the Rencore Governance application.
- Click “Permissions”.
- Select the “Admin consent” tab.
- Choose the permission you want to revoke, select the ellipses menu ([…]) next to it, and select “Revoke permission”.
Info: Revoking a permission does not stop users from consenting to it again if the application requests it. To block this, you will need to disable user consent for the application entirely. See Microsoft's guide on reviewing and revoking application permissions for full details, including PowerShell and Microsoft Graph options.
Revoking Anthropic access
The Anthropic service uses API keys instead of a Microsoft consent, so access is revoked in Claude, not in Microsoft Entra.
To revoke access for Anthropic, you will need to:
- Sign in to claude.ai as the primary owner or an organization owner.
- Go to “Organization settings” and then “API”.
- In the “Keys” section, delete the keys you created for Rencore Governance.
A deleted key stops working immediately. The areas that key covered stop scanning, and the Environment shows a consent warning. To connect again, see Anthropic consent.