To revoke a role from a specific user, execute the following command:
kesl-control [-U] --revoke-role <role> <user>
Example:
Revoke the audit role from user test15:
kesl-control --revoke-role audit test15