Animesh wrote up a blog post here: Temporary Admin Access with Roles in Identity Security Cloud
However, this method of temporary admin access does not work as described. While the entitlements for user levels are available, they do not actually grant the user level permissions. The method above that uses workflows is the only way I know of that works at this time.