Remove external user group memberships and update job tracker

Your removal requests sometimes miss group cleanup, leaving external addresses with access that complicates audits. This removes memberships and records the job so IT resolves access within minutes.