> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting Up Time-based Access

Time-based access lets you time-box a grant: the user picks a duration when requesting, and AccessOwl automatically takes the access away again when the duration runs out. It is configured per application by [Org Admins](/general/roles).

For what happens once it's switched on, see [How Time-based Access Works](/guides/time-based-access/how-it-works).

## Enable it for an application

<Steps>
  <Step title="Open the application's settings">
    Go to the application in AccessOwl and edit its general settings.
  </Step>

  <Step title="Turn on Time-based Access">
    Enable the **Time-based Access** toggle. A duration picker appears below it.
  </Step>

  <Step title="Choose the available durations">
    Add every duration users should be able to pick from. Users can only choose from what you add here.
  </Step>
</Steps>

<Note>
  Turning the toggle back off returns the application to permanent access only. Grants that are already running keep their expiry — switching off stops new time-boxed requests, it doesn't cancel existing ones.
</Note>

## Choosing durations

You can offer any combination of these options:

| Option                                | Typical use                                                  |
| ------------------------------------- | ------------------------------------------------------------ |
| **Unlimited**                         | Permanent access — no expiry                                 |
| 30 minutes, 1 hour, 4 hours, 12 hours | Same-day tasks: a debugging session, a one-off config change |
| 7 days, 14 days                       | Short projects, covering someone on leave                    |
| 30 days, 90 days                      | Longer engagements, contractors, quarterly work              |

Keep the list short. A picker with three sensible options gets used; one that offers everything above makes people guess.

<Note>
  **Unlimited** is not a duration — it's the option that lets users request permanent access. Keep it in the list if permanent access should still be possible for this app. Remove it if every grant must expire.
</Note>

## Limitation: freeform requests

<Warning>
  Time-based access requires users to select permissions. It cannot be combined with [freeform requests](/guides/requests/access-requests#special-request-type-no-permission-selection-required), where the user describes the access in a text field instead of picking permissions.

  If you try to configure both, you'll get a validation error. Either remove the time-based durations, or re-enable **Require users to select permissions** on the app's resources.
</Warning>

The reason is that AccessOwl needs to know exactly which permissions were granted in order to take precisely those away again at expiry. A freeform request doesn't carry that information.