Allow IAM temporary permissions to be granted for specific amount of time.
Allow a timer to be set for temporary user access to resources/resource groups in Access Control (IAM).
This should allow choice of timed access (such as 1 hour) or access until specified date/time.
René M. commented
In addition it would be great to reference to an Azure DevOps Work Item. If the ticket will be set to Done, the rights will remove itself.