Revoke partner access

Remove a partner firm's access to the organization by its access id (from account_partner_access_list). The user must approve. Everyone at the firm loses access on their next request, and so does each person who joined the organization through an invitation from its people, unless they now own it; the invitations its people sent here and the API keys they can no longer issue are revoked; the removal is recorded in the organization's and the firm's audit logs. Only the organization's own owners and admins can do this, not the firm's people.