Define access windows in advance.
That means administrators can schedule access to be revoked after just one hour.
Yes.