CmdID / aws / aws sso-admin
aws sso-admin delete-application-assignment
Revoke application access to an application by deleting application assignments for a user or group. AWS CLI reference
3 options Its page in the AWS CLI reference
Options
--application-arnSpecifies the ARN of the application.--principal-idAn identifier for an object in IAM Identity Center, such as a user or group.--principal-typeThe entity type for which the assignment will be deleted.