Your organization has purchased the Intune Suite. Developers frequently need to run a specific internal installer that requires administrative rights, but you must keep all users as standard (non-admin) accounts on their Windows devices for security. You want to allow elevation of only that one approved installer, require business justification at the moment of elevation, and capture an audit record each time it happens. Which Intune Suite capability and configuration should you implement?