Enable "Cloud Identity Free" then just go to his user in the admin panel and remove the users "Google Workspace" license.