Which approach best enables time-bound or recurring temporary access?

• A. Time-Bound Entitlements With Expiry, Require Approvals, Automatically Revoke At Expiry, And Log The Justification And Approvals
• B. Add Users To A Permanent Group
• C. Grant Perpetual Access
• D. Avoid Approvals

Answer: (A)

Managing time-bound or recurring temporary access hinges on enforcing a defined access window while keeping oversight and an audit trail. The best approach uses time-bound entitlements with a defined expiry, requires approvals, automatically revokes access at expiry, and logs both the justification and the approvals. This combination ensures access is granted only for the needed period, supports repeated requests when needed, and provides a clear record for reviews and compliance. It also minimizes risk by preventing lingering access without fresh authorization. In contrast, adding users to a permanent group creates indefinite access, granting perpetual access defeats the time-bound requirement, and avoiding approvals removes essential controls that keep access usage accountable.