How do I give contractors temporary access to a managed device?
Assign a device to the contractor for the job, put it in a group with only the apps they need, then reassign or remove it when the contract ends. Time-limited access that expires on its own is not available yet and is something the team is working on, so the handover and return are done by an admin.
Contractors need a device for weeks, not years. The device should work for the job and then stop being theirs.
The simplest approach in Skie is a group for contractors. Keep its app list short and its browser rules strict. Assign a device to the person, and the dashboard keeps a lifecycle record of who held it. Add a schedule window if you want the device available only during site hours. A window has days, start, end and an allowed app set, and the first matching window wins.
When the contract ends, an admin reassigns the device to another person or uses Remove Skie, which turns off protections, shows every app again, restores DNS and releases ownership. It deletes no apps. If the contractor never returns it, lost mode locks the device, shows a contact message and builds an evidence file. Because the device owner is Skie, they cannot reset it from Settings or uninstall the manager.
What does not exist yet is an expiry date on access. There is no setting that says this device stops working on the thirtieth. If that matters, keep a return date in your own records and treat the handover as an admin task.
Contractors using their own phones is a different case, and a hard one: Skie needs a clean, freshly set up device to become the owner. Most firms find it easier to lend a cheap company Android tablet or phone than to ask a contractor to wipe their own.