In multi-tenant, a global administrator should be able to remove all the permissions set.

When a new tenant is created, in the manage tab of the tenant, I can add permissions, but I cannot removed them.
Nothing in the logs but a user message saying "You can't remove your own rights".

It probably comes from the fact the inheritance of permissions is blocked and that the admin is not explicitly set in the local permissions.