User was a member of editors group in Azure AD and I removed it from this group. User is still able to login to WP. This is Multisite issue.