Removing idP Grants


Is there a way to have user grants configured for the idP expire or remove them using a script on a schedule?

I would like the grants to be used as the exception (such as for project commissioning). Bad discipline can easily cause the grants to become the way access is managed, and we don’t want that.