Self-service identity unlinking

As part of our transition from XSEDE to ACCESS (https://access-ci.org/), we migrated from Globus Auth (https://docs.globus.org/api/auth/) to COmanage. Identity linking and unlinking are core Globus Auth features (https://docs.globus.org/how-to/link-to-existing/) that our user community cares about. Identity unlinking in Globus is as simple as clicking the X on my Globus user account page.

We have identity linking working great via COmanage enrollment flows (https://spaces.at.internet2.edu/display/COmanage/Understanding+Registry+Enrollment+and+Linking), but users don't appear to be able to undo the links afterwards. At https://spaces.at.internet2.edu/display/COmanage/Manual+Linking+Operations#ManualLinkingOperations-Unlink I see that unlinking is currently a manual, administrator-only operation.

So this is a feature request for self-service identity unlinking. Users need the ability to easily undo the identity links that they can create.