A client of ours had a on-premise to cloud conversion. Many of their folders had explicit rights assigned to the "Everyone" super-group on many sub-folder levels .

Now after converting to Cloud, it is causing issues.  We tried removing at the root level, but hundreds of sub-folders have been assigned the "Everyone" group explicitly.

Building a workflow does have the Assign Rights activity, but one cannot select the "Everyone" group to remove, since it really isn't a Trustee. Is there a way to remove this Everyone account from accessing the folders without having to reset security completely on a folder then add other groups back in? 

Has anyone come across this before?