Set 'Enabled for users to sign-in' to No on ConnectWise Cloud Backup (506e08f9-…) and, unless you can verify them, the Cloud Management apps (MS Teams 24205314-…, Exchange Online b78f6a77-…, MS Graph 0de14c77-…, Partner Center 412dcf96-…, SharePoint b2b55f5b-…, base 2399d300-…; older tenants may show 'SkyKick Cloud Manager'). Deleting removes consent; disabling doesn't remove credentials already added, so review secrets and certificates on every app, remove roles you didn't grant, and check Conditional Access exclusions for these apps. Don't re-enable until ConnectWise confirms credentials are reset.