Example In My entitlement catalog group name → ado_product and it has sub groups → ado1,ado2.
I create certification for sub groups of ado-productgroup(account membership permission cert) .if i revoke item then it should revoke entitlement catalog and from target application.
so which operation type will help to remove access for that item