To revoke access for a user, he can be removed from a role. This is done by unchecking roles from the user role mapping popup. Accessing this popup is described Adding a user to a role.