Feedback wanted! Making the admin experience great in Microsoft Intune

We used Azure as our SSO. We use gmail for email. When deploying BYOD management through intune we find an issue with managing email access once someone removes the profile. So while users will be required to add a management profile to their device to get access to email initially, if they remove management from their device, they will retain access? Is there any way to ensure access to gmail email is removed when the profile is removed?