HOW TO: Deprovision and/or report on expired accounts after X days (4340970)

There is a sample Automation Workflow which is built into Active Roles with this capability.

1. In the Active Roles Console, as an Active Roles Admin, navigate to the following location:

Configuration | Policies | Workflow | Builtin | Clean up inactive user accounts

2. Copy this Workflow so that it can be modified
3. In the copy of the Workflow, change the Find inactive user search activity. On the Scope and Filter tab, instead of the default option to search for an Account that has not logged on in the last 120 days, change this option to Account expired more than X days before the current date
4. Modify any other desired options or activities in the Workflow and schedule it as desired.