Remove user from role

Revokes a specific role from a user for a particular resource. Requires ORG_ADMIN role.