I rarely ask questions here, but this seemed like the place to go for suggestions on a new proposal I am writing. I already asked on LinkedIn groups (sorry if you see duplication). We are hopefully looking at implementing a comprehensive access management policy. This will include removing all local administrative permissions. It seems that in the best of all worlds we should have something in place so that end users can request temporary or permanent local administrative access, assuming the rationale is sound.
Has anyone use a PAM solution they would recommend that does this?