To deprovision the O365 services:

1. Go to Administration then select Service Account.
2. (Optional) Record the App Id under the corresponding service account if you deprovision SharePoint Online, OneDrive, or Microsoft Teams (Teams). You may need it in step 8.
3. Select an Office 365 service account that you want to remove. After selecting, click Remove.

   

   ^{Click the image to enlarge.}

    

   Be cautious when deprovisioning an Exchange Online service account. The following supported Cloud App Security automation APIs will not work after the Exchange Online service account is deprovisioned: Threat Investigation, Threat Mitigation, Threat Remediation.

    
4. After clicking on Remove, a Remove <Office 365 Service Name> will appear on the screen.

   

   ^{Click the image to enlarge.}

   • If the service account is a Delegate Account, Cloud App Security requests Office 365 to verify the selected service account.
   • If the service account is valid, proceed to the next step.
   • If the service account is invalid, choose to cancel the operation or forcibly remove your data generated in Cloud App Security as instructed.
    

   Global Administrator privileges are required for removing service accounts.

    
5. Wait for some time and manually refresh the console. If the selected service account is successfully removed then this should disappear from the Service Account screen.
6. (For SharePoint Online, OneDrive, and Microsoft Teams)
   Open {sharepoint_admin_site}/_layouts/15/TA_AllAppPrincipals.aspx, find the application with name Trend Micro Cloud App Security and the App Identifier associated with the service being deprovisioned, and then click x in the front.
    

   The App Identifier for each service is the one you copied and pasted in the App Id field when provisioning the corresponding authorized account. If you forgot the App Id, refer to the information you recorded in step 2.

    
7. Manually clean up the remaining data.

For details, see:

• Changes Made Under Inline Protection  | Trend Micro Service Central for Exchange Online (Inline Mode)
• Changes Made Under API-based Protection  | Trend Micro Service Central for other services.