Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To answer “How do you revoke an AI agent’s access to an account or connected app?” remove the permission at the layer where it was granted. Depending on the setup, that may mean stopping the agent from using an app, disconnecting an account inside the AI product, revoking the app’s authorization in the provider account, or asking a work-account administrator to remove a managed grant. These actions are different, and there is no universal menu path.

First identify which access you want to revoke

Before changing a setting, identify the provider, the connected account, and who manages the connection. An AI product may have permission to use an app without the app’s link to your account being removed. A provider-account authorization may also remain after you disconnect an account in the AI product.

  • Agent access: prevents a particular AI agent from using a linked app.
  • AI-product connection: disconnects an account from the AI product.
  • Provider authorization: removes the app’s access to your account at the provider.
  • Organization-managed grant: is controlled by an administrator and may cover a managed agent or tenant.

Check the scope as well: one account, other connected accounts, and workspace-managed connections may have separate grants.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Revoke a Google app link or stop agent access

Remove the app’s access to your Google Account

  1. Open Google’s linked apps page while signed in to the relevant Google Account.
  2. Select the app and review the access it has.
  3. Select Remove access, then confirm.

Google says this prevents the app from accessing that Google Account; some app features may stop working.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Stop Gemini or another Google agent from using the app

  1. Open the Google Account linked apps page.
  2. Search for the app or filter by Agent access, then select the app.
  3. Under the relevant agent, choose Stop using and confirm.

This removes the agent’s permission, but does not unlink the app from your Google Account. Google states: “Removing an agent’s access does not disconnect or delete your Google Account’s link with that app.” If you want the app itself to lose account access too, use Remove access as a separate step.

Disconnect a connected account in ChatGPT

  1. In ChatGPT, open Settings > Apps or Plugins.
  2. Select the app and the relevant connected account or connection menu.
  3. Choose Disconnect.

OpenAI’s instructions describe the path as Settings > Plugins; labels may vary by interface. Disconnecting stops future access through that account. It does not necessarily disconnect other accounts or administrator-managed workspace connections, so review those separately if they are in scope. See OpenAI’s account-connection instructions.

Rank #2
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Changing an app permission or approval setting is not the same as disconnecting it. OpenAI says, “Changing an app permission does not disconnect the app or revoke access already granted to a provider account.” To end future access through an account, disconnect it; use the provider’s own unlinking or access-removal controls if you also need to revoke the provider authorization. See OpenAI’s app-permissions guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Revoke access for a Microsoft Entra-managed agent

If an agent or account is managed by your organization, contact its administrator or security/helpdesk team. Microsoft says a user or administrator can remove or disable an agent or its permissions, while global removal is performed by an administrator using Microsoft Graph API or Microsoft Entra PowerShell. The exact action depends on how the agent received access; see Microsoft’s Entra Agent ID sign-in process.

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Ask the administrator to check the grant type

  • Delegated permissions: an interactive agent acts for a signed-in user. The administrator should check the user’s consent and the corresponding authorization.
  • Application permissions: an autonomous agent uses app-only access. This has separate assignments and may not be removed by disconnecting one user account.

Organizations can also use other roles and access assignments. A user-level disconnect therefore may not remove an organization-wide grant. Microsoft’s guide to granting agents access to Microsoft 365 resources describes these permission paths.

For the Google Workspace and Salesforce app cases covered by its documentation, Microsoft Defender for Cloud Apps also describes administrator workflows to inspect permissions and related activity, then revoke access. Follow the provider-specific scope in Microsoft’s app governance alert guidance.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Verify what changed—and what remains

After taking action, check the same account and app connection lists again. Confirm that you removed the intended grant, not just changed how the agent is allowed to use it. If more than one account, agent, or workspace connection was involved, inspect each separately.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • If you stopped an agent, check whether the app remains linked to the provider account.
  • If you disconnected one account in an AI product, check for other connected accounts and administrator-managed connections.
  • If this is a work identity, ask the administrator to verify delegated consent, app-only permissions, and other assignments.

Revoking access does not by itself delete information already retrieved or saved. Treat saved conversations, files, and provider-side retention as separate matters, and use the relevant product and provider controls for those concerns.

Best Value
Yubico - YubiKey 5C - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB, FIDO Certified - Protect Your Online Accounts (5C)
  • POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.