@dani Just going to suggest bundle ID 601 / NSCorp: Auto-Expire Access. I use this regularly to remove access based on dates. has the capability to remove all access and to remove certain roles on certain dates.