Our Risk Audit found that we are not "Disabling" an account after 90 days
of inactivity.

So we are thinking of using a cron job to accomplish that. Is there a way
we can take the last login date and update "Account has Expire Date" by
some days?

Any help will be appreciated.