Use a visible ID for all foreign user types
Take out visible ID
Delete foreign user if permissions revoked