I have a non-employee that requires access for longer than six months. What do I do?