Hi @Rania,
Welcome to the community.
This is an expected behaviour as the entitlements have a sticky behaviour in ISC.
Below are the only ways to revoke the entitlements correctly. Document
ISC will re-add the entitlement any other way you remove it. So if the account does not exist for the user, ISC would create the account and entitlement.
Access profiles are one way to handle this (as they are not sticky). Or make use of the workflows to revoke entitlements with an HTTP action during account moves or terminations.