If you remove the role from the access list, that should be sufficient