The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →To stop an AI app from accessing business data, revoke the grant in the platform that issued it—not merely the app’s own account or an unrelated desktop client. First identify the app, the Salesforce user or org, Slack workspace, or Microsoft 365 tenant that authorized it, and whether the authorization belongs to one person or the whole organization. Then use the matching Salesforce, Slack, or Microsoft Entra control below.
- Individual Salesforce access: revoke every OAuth token for the app in the user’s personal settings.
- Salesforce-wide access: an administrator can revoke sessions or block the connected app in Setup.
- One Slack authorization: revoke that member’s authorization without necessarily removing the installed app.
- Slack app removal: a Workspace Owner or authorized app manager may need to remove the app.
- Microsoft 365 admin consent: revoke organization-wide permissions in Microsoft Entra.
- Microsoft 365 user consent: use Microsoft Graph or PowerShell; the Entra portal’s User consent view does not perform that revocation.
Start by identifying the grant you need to revoke
An AI app can have more than one relationship with a business platform. A Salesforce connected-app token is different from a Slack workspace installation. Microsoft Entra admin consent is different from a user’s delegated consent, and Teams resource-specific consent has its own scope. Removing the wrong object can leave the data connection active.
As an Amazon Associate I earn from qualifying purchases.
Record the app and the account that approved it
- Write down the app’s exact display name, publisher, and any client or application ID shown by the platform.
- Identify the approving Salesforce user, Slack member, workspace, Microsoft 365 user, or tenant administrator.
- Note the date, permissions, channels, teams, files, or records the app could reach.
- If this may be an incident, preserve the relevant audit evidence and follow your organization’s incident process before making broad changes.
Do not assume that deleting an account with the AI provider, uninstalling a browser extension, or removing an unrelated desktop client revokes a platform authorization. The grant must be removed where it was issued.
Recommended Free Tools
Use the narrowest effective action
| Situation | Grant or scope | First action | Who may need to act |
|---|---|---|---|
| One person connected an AI app to Salesforce | Salesforce OAuth connected-app tokens | Revoke all relevant entries for that app in Advanced User Details | The user; an administrator if the user cannot access the control |
| The app must be stopped for everyone in a Salesforce org | Current connected-app sessions and future sessions | Use Connected Apps OAuth Usage to revoke or block the app | Salesforce administrator with the required permissions |
| One Slack member authorized a third-party app | That member’s authorization | Revoke the authorization from the app’s Settings page | The member or an authorized workspace administrator |
| The app should no longer be installed in Slack | Workspace app installation | Remove the app from Installed apps | Workspace Owner or permitted app manager when approval controls apply |
| An app has Microsoft 365 tenant-wide admin consent | Entra enterprise-application permissions | Revoke the relevant permission under Admin consent | Application Administrator, Cloud Application Administrator, or another role allowed for that action |
| A user granted Microsoft 365 consent | User-consent delegated grant | Use Microsoft Graph or PowerShell to remove the grant | Identity administrator with the required API or PowerShell permissions |
| The app reaches Teams data | Teams resource-specific consent (RSC) | Check the team or user scope and the app’s permissions in Entra | Teams or identity administrator, depending on the permission |
Revoke an AI app’s Salesforce access
For your own Salesforce user
Salesforce calls these connections OAuth-enabled connected apps. Its current Help guidance says that revoking the app’s access prevents it from accessing your Salesforce data.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Sign in to Salesforce and open your personal settings.
- Search for Advanced User Details. If that page is not offered, search for Personal Information and open the corresponding user-details page.
- Find the OAuth Connected Apps section.
- Review every entry for the AI app. Open the entry details when you need to distinguish an old approval, a different scope, or a duplicate authorization.
- Select Revoke for each relevant entry and confirm the action.
Check the complete list rather than stopping after the first match. Salesforce allows separate approvals or scopes to create more than one entry for the same app. Revoke all entries that belong to the connection you want to terminate.
Salesforce’s five-approval limit
Salesforce’s current documentation states that a user can have five unique approvals for a connected app. After the fifth approval, the oldest approval is revoked. This is a platform limit, not a measurement of security risk and not a guarantee that an unwanted app has been removed from every user or organization.
For a Salesforce administrator who needs a wider response
When the connection affects several users, or when a user cannot remove it, use the administrator view:
- Open Setup.
- Search for and open Connected Apps OAuth Usage.
- Inspect the app’s usage and the users with active sessions.
- Open the usage detail for a specific user when you want to end only that user’s current session.
- Choose Revoke to end that user’s current session, or choose Revoke All to end all current sessions for the app.
- Choose Block when the app must be stopped across the org. Blocking ends all current user sessions and prevents new sessions until an administrator unblocks the app.
The page lists the permissions required to view and manage connected-app usage. If an ordinary user cannot see the page, a Salesforce administrator must perform the action. Use Block only when organization-wide prevention is intended; it is broader than removing one user’s token.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Current connected-app background for administrators
Salesforce documentation says creation of connected apps is restricted as of Spring ’26 and recommends external client apps for new development. Existing connected apps can continue to be used. This change does not alter the revocation steps above, but it explains why a newer integration may be presented as an external client app rather than a newly created connected app.
Remove or revoke an AI app in Slack
Slack separates removing an installed app from revoking one third-party authorization. Removing the app affects the workspace installation. Revoking an authorization targets a member’s approval while leaving the app installed for other approved uses.
Remove the app from a Slack workspace
- In the Slack desktop app, select the workspace name.
- Choose Tools & settings, then Manage apps. This opens the Slack Marketplace.
- Select Installed apps.
- Find the AI app and open its details.
- Open Settings and choose the available removal control.
- Confirm that you want to remove the app from the workspace.
The exact control can depend on workspace restrictions. If Slack does not show a removal option, do not infer that the app is impossible to remove; check the workspace’s approval and ownership rules.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Revoke one member’s third-party authorization without removing the app
- Open the app from Installed apps and go to its Settings.
- Find the Authorizations area and open the list of authorized members.
- Locate the affected member or authorization.
- Choose the revoke control for that authorization and confirm.
This is the appropriate choice when one person’s approval is unwanted but the app remains legitimately installed for other members.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
When a Workspace Owner or app manager must act
If workspace app approval is enabled, Slack may limit removal to Workspace Owners and designated app managers. Workspace owners can also restrict who may install or remove apps. Ask a Workspace Owner or app manager to perform the removal when the control is missing from your account.
Slack-built app configurations
Slack-built app configurations have a separate disable or remove flow from third-party Marketplace apps. If the AI integration was created inside the workspace rather than installed from the Marketplace, open that configuration’s own management page and use its disable or removal control.
Slack’s official help article may display Japanese localization depending on the access path. Labels in a live workspace can therefore differ slightly from the English wording above; follow the equivalent Installed apps, Settings, Authorizations, remove, or revoke controls.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsRevoke Microsoft 365 access through Microsoft Entra
Microsoft 365 app access is administered through Microsoft Entra enterprise applications, but the correct procedure depends on how consent was granted. Tenant-wide administrator consent, an individual user-consent grant, and Teams resource-specific consent are separate permission surfaces.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Revoke organization-wide admin consent
- Sign in to the Microsoft Entra admin center with a role that can review and manage enterprise-application permissions.
- Go to Entra ID > Enterprise apps > All applications.
- Select the AI app.
- Open Permissions.
- Use the Admin consent view to inspect the organization-wide permissions that were granted.
- For the permission you want to remove, select its ellipsis menu and choose Revoke permission.
- Review the remaining permissions to make sure the app no longer has the access you intended to remove.
Microsoft lists Cloud Application Administrator and Application Administrator among the roles that can review enterprise-application permissions. The exact role requirement can vary with the action and your tenant’s configuration. If the command is unavailable, ask an identity administrator rather than changing unrelated tenant settings.
User consent cannot be removed from that portal view
The Entra portal’s User consent tab is view-only for this task. It does not revoke the delegated grant. Microsoft directs administrators to the documented Microsoft Graph API or PowerShell method for removing user-consent permissions. Use the method that matches your organization’s change-control and scripting standards, and verify that you are targeting the correct user, application, and permission.
Remove an app assignment from an affected user
Microsoft’s illicit-consent remediation guidance describes a separate per-user action that is useful when investigating a suspected unauthorized grant:
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute- In the Microsoft Entra admin center, go to Identity > Users > All users.
- Select the affected user.
- Open Applications.
- Select the application.
- Choose Remove.
This removes the application assignment from that user. It should be considered alongside, not substituted for, removal of the underlying user-consent grant when one exists.
Investigate with Microsoft Purview audit logs
After identifying the app, review Microsoft Purview audit logs to establish which users were affected, the relevant timeframe, and the permissions involved. Preserve the records required by your incident process. A single user report may not reveal every account that authorized the same application.
Do not disable every integrated application as a first response
Microsoft notes that disabling integrated applications can prevent users from granting consent, but that setting applies broadly. It can block consent to all applications and impair legitimate non-Microsoft integrations. Use it only when the incident response requires that breadth and the productivity impact has been accepted; first identify and remove the specific app or grants whenever possible.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Check Teams resource-specific consent separately
If the AI app’s access involves Microsoft Teams content, determine whether it uses resource-specific consent (RSC). Microsoft describes RSC permissions as granular and scoped to a particular team or user, rather than automatically applying to the whole tenant.
- Identify the team or user named in the app’s permission details.
- Open the Teams app permission information and follow the link to the app’s permissions in Microsoft Entra.
- Review the admin-consent entry and revoke the relevant permission when the grant is no longer justified.
- Check other teams or users if the app was authorized separately in more than one place.
Do not treat an RSC grant as equivalent to a tenant-wide grant. Its narrower scope can be useful for containment, but every separate team or user authorization must be assessed.
What to do when access may be illicit
For a suspected malicious or unauthorized AI connection, avoid starting with the broadest switch. The goal is to contain the specific grant while preserving enough information to understand its reach.
- Identify the application: capture its display name, application ID where available, publisher, and requested permissions.
- Map the scope: determine whether the access belongs to one Salesforce user, the whole Salesforce org, one Slack authorization, the Slack workspace, one Microsoft 365 user, the tenant, or a Teams team.
- Preserve evidence: record the current permission view and relevant Salesforce, Slack, Entra, and Purview audit details according to your incident policy.
- Revoke narrowly: remove the user token, member authorization, user-consent grant, or specific Teams permission that is not legitimate.
- Escalate when needed: use Salesforce block, Slack app removal, or tenant-wide controls only when the evidence shows that the broader scope is required.
- Review for additional authorizations: search for duplicate Salesforce approvals, other Slack members, other Entra users, and additional Teams scopes.
- Document the result: note who performed the change, which grant was removed, and what remains intentionally enabled.
There is no universal revocation-delay figure in the official guidance for these platforms. Confirm the result in the platform’s permission and session views and continue monitoring the relevant audit records rather than assuming that an app account deletion or client uninstall completed the work.
Troubleshooting missing controls
The Salesforce OAuth entry is not visible
- Search personal settings for Advanced User Details and then try Personal Information if the first label is absent.
- Ask a Salesforce administrator to check Setup > Connected Apps OAuth Usage.
- Search the full OAuth list because the app may have multiple entries.
Slack does not show Remove or Revoke
- Confirm whether you are viewing an installed Marketplace app or a Slack-built app configuration.
- Check whether workspace app approval is enabled.
- Ask the Workspace Owner or app manager to perform the action if ownership restrictions apply.
Microsoft Entra shows the permission but no revoke command
- Determine whether the grant is under Admin consent or User consent.
- Use Microsoft Graph or PowerShell for a user-consent grant; the portal view alone does not remove it.
- Check your directory role and request the appropriate identity administrator if the action is restricted.
How to verify that the right access was removed
Verification should match the scope you changed:
- In Salesforce, confirm that the app’s OAuth entry or administrator session no longer appears as active, and check for other entries for the same app.
- In Slack, confirm that the member authorization is gone or that the app is no longer listed under Installed apps, depending on the action taken.
- In Microsoft Entra, re-open the app’s Permissions page and verify that the targeted admin-consent permission is no longer granted. For user consent, verify through the Graph or PowerShell result and the user’s application assignments.
- For Teams, confirm the specific team or user scope and inspect the corresponding permission record.
- Review audit logs for unexpected users, permissions, or activity that indicates another authorization remains.
Revocation is a control change, not an account-deletion procedure. Keep legitimate integrations that were intentionally approved, and record any remaining access so that a later administrator does not mistake it for an overlooked grant.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
