As of Registry v3.2.0, CO Group Memberships may have valid from and valid through dates attached. These may be manually populated, or synced via Organizational Identity Sources. CO Group Memberships outside of the specified validity dates will not be provisioned or usable for Registry authorization.
To manually configure validity dates for a CO Group Membership, navigate using one of these paths:
- CO Person Record > Click Edit next to the appropriate group membership
- CO Group Record > Click Edit next to the appropriate group member
Note that the Registry Job Shell
groupvalidity must be configured to run in order to reprovision records associated with a CO Group Membership whose validity status has changed.