If a stake-holder marks an entitlement as inappropriate, what is the process to revoke it?

When a reviewer performs an access certification, they assess whether any given entitlement, assigned to an in-scope user, is business appropriate or should be revoked. Revocation is not an intrinsically welldefined term, however: does it mean disabling or deleting a login account? Should revocation happen immediately or at a later date? Should action be taken as soon as the certifier signs off on their review, or be subject to approval by other stake-holders? Read more here: https://hitachi-id.com