Is it Possible to deny Cortex XSOAR access to CSP Super Users?
Yes. By default, CSP Super Users generally don't have access to Cortex XSOAR tenants.
The first Super User who logs into the Cortex Gateway is automatically assigned the Account Admin role and has access to the tenant.
The user who activates the Cortex XSOAR tenant will also be assigned the Account Admin role (if there is no current Account Admin role) or Incident Admin (if there is an existing Account Admin role) and will have access to the tenant. Any additional users including Super Users need to be assigned access to the tenant.