Implement grant deletion provider api

[gtema]

We have a grant creation provider api, but lack the deletion (revoking a role).
Provider need to be extended with the corresponding method that revokes direct assignment (it is not possible to revoke inherited assignment directly, so the process should not fail when such request comes)