Maybe PAW? https://learn.microsoft.com/en-us/security/privileged-access...