A company frequently onboards external contractors who need temporary access to a specific set of applications, SharePoint sites, and groups. The IT team wants to bundle these resources together so contractors can request access themselves, have the request approved by a manager, and have access automatically expire after 90 days without manual cleanup. Which Microsoft Entra ID Governance feature should they use?