Blocking users from SPO

We've got a situation where we need to block a subset of users from accessing our SPO tenant while still keeping their access to the rest of the O365 suite active. We can't remove them from AD at the...