For more information, see Managing roles and sub-estates.
To remove an application from a firewall policy: