Access requests

Administrators only. Granting adds the person to the application's access group; a time-limited grant is removed automatically when it ends. The person is emailed either way.