A Role in RBPM can have an expiration date.

What is the process by which this happens?

I can think of a couple of approaches:

1) The initial nrfRequest object which contains the Role expiration time
is kept around and RRSD polls periodically to find any Roles that have
expired, and then removes them.

2) RRSD polls the nrfAssignedRoles, looks at the XML in the path.xml
component and finds expirations that are due.

3) The UA DB has a process that notices Roles that are due to expire,
generates an nrfRequest in some format that triggers RRSD to remove the