Hi,
In Jira server it was possible to see all project roles of a user.
As organisation admin i am responsible to disable users.
In the past, on our server instance, i had the possibility to do a good clean-up
On the details of a user (in crowd) i got a list of all roles from a user. It was easy to maintain.
It was possible to uncheck all the project roles from the user before disabling the jira access.
I don't find this possibility in cloud.