Going to shut this down as it already happens. We do periodic (manual) checks and do not want to move this to an automatic removal of access when users are tagged.

Thanks for the suggestion.