Hi,
After discussions with Qlik Support I was asked to post this here since there are no viable solution at this time.
My initial question was how long a users session is active in Qlik Cloud through Azure and if revoking any rights in the Azure tenant what would happen to the user.
Right now, as long as a user is active in his or her session they will still have the same access/rights as long as they keep their session active. So in theory a user who gets laid off in the morning and have time to log in to the Qlik Cloud tenant before their rights in Azure gets revoked could still be logged in and do things in Qlik even though they in reality does not have any rights anymore but simply started their session before their rights were cut off.
When testing this in our own tenant, even by disabling the user itself in Qlik Cloud Management Console still allows the user to keep the session alive if they are in an app for example. They get disconnected if trying to go to data load editor or a new app, but the session within the app is still very much alive.
BR
Daniel