What is a time-limited authorization?
A time-limited authorization is a manual permission grant that includes an expiry date. On midnight of the expiry date, the permission is automatically deactivated — no administrator action is required.
This is ideal for:
- External contractors with a fixed engagement period
- Temporary role coverage (e.g., maternity leave replacement)
- Project-based access (e.g., access to a reporting tool for Q3 only)
- Trial access before a formal authorization decision
Setting an expiry when granting
- Open the New Authorization modal (see the manual grant guide for the full flow).
- In the Valid Until date field, select the last day the permission should be active.
- Optionally, set a Valid From date if access should start in the future rather than immediately.
- Confirm. A countdown badge will appear on the row in the Active table.
Monitoring expiring permissions
The Control and Supervision of Authorizations application provides an Expiring Authorizations module that automatically alerts you to any permission expiring within the next 14 days across your entire managed scope. Review it regularly to avoid unexpected access loss.
Alternatively, the Inactive / History tab in Manage Permissions shows a blink icon next to any row that has already expired.
Extending an expiry
- Find the active row for the user.
- Click Edit .
- Change the Valid Until date to the new expiry.
- Confirm. The extension is applied immediately.
What happens when a permission expires?
The permission row moves to the Inactive / History tab with the end date recorded. The user loses access on that date. If you need to restore access, use the Restore button and set a new validity period.
