You can remove privileges from an Active Directory group by removing the role that was assigned to the group.
Note: If you remove a custom role that is assigned to a group, you are only removing the assignment of the role and not the role itself.