If i was to set a user as administrator using the Token Manager, how can i revoke their permissions if necessary?