Reads the grant setfacl -x withdraws: u:<user> or g:<group> (a bare name is a user, as on Linux).
setfacl -x
u:<user>
g:<group>
The entry as typed.
The grant, or the refusal's words.
Reads the grant
setfacl -xwithdraws:u:<user>org:<group>(a bare name is a user, as on Linux).