You might also find this blog post by @sharvari helpful. She demonstrates how to revoke all access for an identity in a workflow.