List access that ends soon
list_expiring_accessLists access assignments ending within the next N days (default 30) for the caller and direct reports, soonest first, showing whose access, which role, and when it ends.
Instructions
List the assignments that end within the next days (default 30) for the authenticated user and their direct reports (the members of the orgs they manage, as list_my_team), soonest first: whose access, which role, when it ends. It reads each person as the caller, so midPoint decides who is visible; people it hides are listed by OID. When you write to a person, name people, roles and requests by their display names rather than OIDs.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | how many days ahead to look, default 30, max 365 | |
| includeSelf | No | also list the caller's own access, default true |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | Yes | ||
| items | Yes | assignments that end in the window, soonest first | |
| until | Yes | the end of the window (RFC 3339) | |
| people | Yes | how many people were checked: the caller (unless excluded) and their direct reports | |
| subject | Yes | the identity this answered for | |
| unreadable | No | OIDs of people whose access midPoint didn't let the caller read |