I think this is a different case though. The point of those "temporary priviledges" is not so that someone only can use them sometimes, it's that they only do u

I think this is a different case though. The point of those "temporary priviledges" is not so that someone only can use them sometimes, it's that they only do use them sometimes. What you say (that people should only have the permissions that they need) is orthogonal to that.