Removing user access when no longer needed, typically upon termination or role change. Critical for security; delays create orphaned account vulnerabilities.