Access packages are used to govern access for your internal employees, and also users outside your organization. Working with access packages ensures that users (guests included) only have the relevant permissions when required.
These access packages contain resources that users can request upon their needs, and the delegated managers can define policies with rules for which users can request, who must approve their access, and when access expires.