Google Workspace now lets administrators grant temporary, time-limited admin access instead of leaving permissions switched on indefinitely.

• What it is: A new Google Admin console feature that lets a super admin assign an administrator role to a person, group or service account with an automatic expiry date, rather than a standing permission that has to be manually removed later.
• Who is affected: Any business using Google Workspace, particularly those who occasionally grant extra access for a specific project, staff cover, or an external audit.
• What the risk is: Forgotten "standing" admin access is one of the most common ways businesses end up with more people able to change security settings, delete data or reset passwords than they intend.
• What to do: Review who currently holds admin roles in your Google Workspace account, and use the new expiry option for any access that should only be temporary.

We recommend using this feature whenever admin access is only needed for a short period, to reduce the number of standing high-privilege accounts in your business.

Source: Google Workspace Updates