+
K
Constraints on how long a principal can be a member of a group. All groups have an expiration policy, but the constraints are empty unless set by a group owner.