The Grouper Deprovisioning Report should be used in cases where a deprovisioning administrator doesn't deprovision certain memberships/privileges.   This can be due to:

• Human intervention is required (someone wants to see it)
• The system of record is outside of Grouper and loaded in
• a group shouldn't be deprovisioned (e.g. lockout group)

The deprovisioning report can be viewed by the object admins (or to a user who has UPDATE/READ privileges for the group). 
You can initiate the Deprovisiong Report as shown here:

Click on deprovisioning actions => deprovisioning report

See the report, you can mark the report as certified or remove access