code: def remove_tenant_user_role(request, project=None, user=None, role=None,
                              group=None, domain=None):
      
      manager = keystoneclient(request, admin=True).roles
      if VERSIONS.active < 3:
          return manager.remove_user_role(user, role, project)
      else:
          return manager.revoke(role, user=user, project=project,
                                group=group, domain=domain)
docs: Removes a given single role for a user from a tenant.