Revoking permissions

Last updated Sep 25, 2026 Consent

AI summary

You can revoke permissions granted to Rencore Governance in your tenant. For Microsoft services, remove Admin consent in Microsoft Entra; for Anthropic access, delete API keys in claude.ai. Once revoked, the affected Environment cannot scan until you grant consent again.

Customers can revoke the App-Only or Delegated permissions granted to Rencore Governance at any point. For Microsoft services, revoking is done entirely on the Microsoft Entra side of your tenant, not from within Rencore Governance. Once revoked, the affected Environment will stop being able to scan the tenant until consent is granted again.

To revoke permissions granted to Rencore Governance:

Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
Browse to “Entra ID” and then “Enterprise Applications”.
Select the Rencore Governance application.
Click “Permissions”.
Select the “Admin consent” tab.
Choose the permission you want to revoke, select the ellipses menu ([…]) next to it, and select “Revoke permission”.

Info: Revoking a permission does not stop users from consenting to it again if the application requests it. To block this, you will need to disable user consent for the application entirely. See Microsoft's guide on reviewing and revoking application permissions for full details, including PowerShell and Microsoft Graph options.

Revoking Anthropic access

The Claude Enterprise connector uses API keys instead of a Microsoft consent, so access is revoked in Claude, not in Microsoft Entra.

To revoke access for Anthropic, you will need to:

Sign in to claude.ai as the primary owner or an organization owner.
Go to “Organization settings” and then “API”.
In the “Keys” section, delete the keys you created for Rencore Governance.

A deleted key stops working immediately. The areas that key covered stop scanning, and the Environment shows a consent warning. To connect again, see Anthropic consent.

Frequently asked questions

How do I revoke Rencore Governance permissions granted through Microsoft?

In Microsoft Entra, select Rencore Governance in Enterprise Applications, click Permissions, select the Admin consent tab, choose the permission, select the menu next to it, and select Revoke permission.

What happens to the Environment after I revoke a permission?

The affected Environment stops being able to scan the tenant. Scanning resumes once you grant consent again.

How do I revoke access for the Claude Enterprise connector?

Sign in to claude.ai as the primary owner or organization owner, go to Organization settings and then API, and in the Keys section delete the Rencore Governance keys.

Was this page helpful?