There are two ways to manage the extra access permissions for officials:
Once on this page, you can add/remove officials from the various groups.
If you entered through the group symbol for a specific official, you'll have direct access to remove that official from any of the groups the official is already part of.
If you entered through the "Permissions" menu item, you'll have a list of groups and can manage additions and subtractions for all.
If the newly added official is already logged in, they must logout and log in again to activate any new permissions. (Switching accounts for those that multiple accounts does the same thing).
Using Extra Permissions
Note that any extra permissions are not activated when a user is logged in automatically by way of the "Keep Me Logged In" option. They can still use that option but will only have basic level official permissions while doing so.This will be indicated by the presence of a warning triangle by the user's name in the top right: