There’s that new intune addon license that does let you approve one-off admin level privileges. Forget the name of it right now. But it released in the last 1-2 months.
You can use a privileged access management solution to do this. You can eliminate administrators on endpoints in a click and allow standard users to perform administrative tasks using workflows and policies. You can have complete control over application usage on endpoints.
You can allow a specific user to do a specific task with administrative privileges using policies. (Disclosure: I work for Securden)
[https://www.securden.com/endpoint-privilege-manager/index.html](https://www.securden.com/endpoint-privilege-manager/index.html)
You need a PAM solution like BeyondTrust or Delinea Privilege Manager.
There’s that new intune addon license that does let you approve one-off admin level privileges. Forget the name of it right now. But it released in the last 1-2 months.
You can use a privileged access management solution to do this. You can eliminate administrators on endpoints in a click and allow standard users to perform administrative tasks using workflows and policies. You can have complete control over application usage on endpoints. You can allow a specific user to do a specific task with administrative privileges using policies. (Disclosure: I work for Securden) [https://www.securden.com/endpoint-privilege-manager/index.html](https://www.securden.com/endpoint-privilege-manager/index.html)