There is not her expected feature on the current release.
But regarding #2, the below workaround can meet the expectation.
- When the user applies the workflow request, set the date and time like from 9:00 on Monday to 17:00 Friday.
- The user's access time is from 9:00 to 17:00 every day.
As a result, since the user can login PAM at from 9:00 to 17:00, it is possible to access the target server only the term from at 9:00 - 17:00 every weekday.