> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytebase.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Access Expiration
Every [role request](/security/database-permission/request/) and [just-in-time access](/security/database-permission/just-in-time/) request carries an **Expiration** — how long the granted access stays valid before Bytebase revokes it automatically. A **Workspace Admin** can cap that duration, and members see a reminder before a granted role expires.
## Maximum request expiration
A **Workspace Admin** can set the longest expiration any request is allowed to use, so members can't grant themselves long-lived access. Go to **Settings > General**, find **Maximum request expiration**, and set the number of days. Select **Never expires** to remove the cap.
The cap applies to every project role grant except the **Project Owner** role, and to all data access requests. A request whose expiration exceeds the maximum is rejected — the request drawer only offers durations within the cap.
Setting a maximum request expiration requires the `bb.settings.setWorkspaceProfile` permission — for example a **Workspace Admin**.
## Role expiration reminder
Users assigned a project role with a limited duration will see a persistent reminder starting two days before the role expires, which remains visible until dismissed.
