Removing external unlicensed user - SSO enablement

Hello team,

In order to implement SSO on our enterprise plan for internal users, planning to remove the email logins. If we have an external unlicensed user who still needs access to shared items (not an owner), how would we safely remove this user? I don't see an option to Delete, only Deactivate, which I'm not sure the user would still retain needed access to shared items. Any advice? Thank you!

Answers