diff --git a/atst/domain/environments.py b/atst/domain/environments.py
index 1585a59b..f1d8842f 100644
--- a/atst/domain/environments.py
+++ b/atst/domain/environments.py
@@ -88,4 +88,7 @@ class Environments(object):
 
     @classmethod
     def revoke_access(cls, user, environment, target_user):
-        pass
+        Authorization.check_atat_permission(
+            user, Permissions.REMOVE_CSP_ROLES, "revoke environment access"
+        )
+        EnvironmentRoles.delete(environment.id, target_user.id)
diff --git a/atst/domain/workspaces/workspaces.py b/atst/domain/workspaces/workspaces.py
index 1185c5de..4edecccf 100644
--- a/atst/domain/workspaces/workspaces.py
+++ b/atst/domain/workspaces/workspaces.py
@@ -164,7 +164,6 @@ class Workspaces(object):
 
         workspace_role.status = WorkspaceRoleStatus.DISABLED
         for environment in workspace.all_environments:
-            # TODO: Implement Environments.revoke_access
             Environments.revoke_access(user, environment, workspace_role.user)
         WorkspacesQuery.add_and_commit(workspace_role)