I would like to be able to have revoke as a manual entitlement option. In case a new user has been created in x target systems. While the user should have been correlated. I want to be able to revoke the new user from the target systems and after the correlation with the old and correct AD account, retry all the grants.