There should be a built-in option to remove a principal completely from a folder without needing to replace the principal with another one. In practice, this could be done by running SwapACL with a blank target principal. Support needs to be added to accept a blank value and accordingly skip the permission addition part of the swap flow.
There should be a built-in option to remove a principal completely from a folder without needing to replace the principal with another one. In practice, this could be done by running SwapACL with a blank target principal. Support needs to be added to accept a blank value and accordingly skip the permission addition part of the swap flow.