How to protect the client when it is open for modifications in sap?

Usually no Developers or Consultants have live ID in the production system. If the system needs  to be open a user ID is created/activated and then disables when the client is closed again