Just-in-Time Access

### Required Terms

- [x] I agree to follow this project's [Code of Conduct](https://github.com/heroku/roadmap/blob/main/CODE_OF_CONDUCT.md)
- [x] I have read and accept the [Salesforce Program Agreement](https://www.salesforce.com/company/program-agreement/)

### What service(s) is this request for?

Heroku Platform

### Tell us about what you're trying to solve. What challenges are you facing?

Currently we can only permanently assign permission to users, meaning users who have production access, permanently have production access, increasing the probability of human error or bad actors.

It would be great if Heroku support something similar to Azure's PIM or Google's PAM, whereby permissions can be provided Just-in-Time, and even better if it can have an optional approval process around it also.