--- title: "Temporary Access" description: "Learn how to set up timed access to sensitive resources for user and machine identities." --- Certain environments and secrets are so sensitive that it is recommended to not give any user permanent access to those. For such use cases, Infisical supports the functionality of **Temporary Access** provisioning. To provision temporary access through Web UI: 1. Click on the `Edit` button next to the set of roles for user or identities. ![Edit User Role](/images/platform/access-controls/edit-role.png) 2. Click `Permanent` next to the role or specific privilege that you want to make temporary. 3. Specify the duration of remporary access (e.g., `1m`, `2h`, `3d`). ![Configure temp access](/images/platform/access-controls/configure-temporary-access.png) 4. Click `Grant`. 5. Click the corresponding `Save` button to enable remporary access. ![Temporary Access](/images/platform/access-controls/temporary-access.png) Every user and machine identity should always have at least one permanent role attached to it.