Workspace owners can remove access from that person, and all permissions are automatically updated.