RevokeAllocationAccess

Take a per-user grant back (AllocationManage). Idempotent — revoking a grant that does not exist succeeds and changes nothing. The investor falls back to the default level; units they already hold are unaffected and still redeemable.