Is there a simple way to temporarily grant network access to a single application?
You could create a custom rule set to achieve this using Little Snitch:

https://www.obdev.at/products/littlesnitch/index.html