Subject
Skip locked / expired users (all-users scope) Ignore role assignments outside their validity dates