Create temporary users with any role. When a temporary user is an administrator, sensitive actions require approval from a real administrator.