Maybe if you deactiveer a users entra id that he cant access its vaultwarden vault anymore.