Need to know what 3rd party apps our users have installed

I am the superadmin and I need to see what 3rd party apps our users already have installed/authorized on their accounts, and I want to be able to disable those if needed as part of our security certification. Is this able to be done at the admin level? I also know I can create a new Role that doesn't allow 3rd party apps at the user level, which I will do, but for those who have already enabled 3rd party apps in their account, will those be removed when I assign them to that new role? Or no?