For each role that a user has, allow "start" and "end" UTC times to specify when the user should actively have that role.

If the current time is within the "start" and "end" window, the user may be considered to have the role. Outside of the window, the user would not have the role.