How to set grace period on role assignments

Hi,

I am currently looking at what is the best technical solution to manage grace periods in role assignments.

My use case is the following :

1. An internal user gets the "Active Directory" role, when he is at the status NORMAL

   • The role is assigned thanks to a Role Assignment Policy scoping internal users with status==NORMAL.

2. At currentDate >= activationUntil, his status is set to RETIRED and enabled = false

3. I want the user to keep the role until activationUntil + 1 day

What is the standard solution to manage Role Assignments grace periods ?

Regards,

Logan