Hi,   is there a way to assign a specific role to a user that have is account expired ? the account is not locked or disabled. I did try with the userattr.accountExpires, but no success till now. I did create a expression : userAttr.accountExpires > 123 (always false) userAttr.accountExpires < 123 (always false) userAttr.accountExpires != 123 (always true)   A value of 0 or 0x7FFFFFFFFFFFFFFF (9223372036854775807) indicates that the account never expires   Second issue trlate to that is that I should put a dynamic time value ... something like "time(now())" is there a function that give me the current time ( epoch time)   Regards,   Frederic De Clerck ... View more