if you remove the role from the access list - the user will need to log out and log back in I think for it to be queryable.