A well known macOS It developer created an app that can give you admin rights and take them away with an app. https://github.com/SAP/macOS-enterprise-privilege

A well known macOS It developer created an app that can give you admin rights and take them away with an app. https://github.com/SAP/macOS-enterprise-privileges https://github.com/SAP/macOS-enterprise-privileges Essentially you can still be the admin on your account but this app can make you a general user. When you need to install anything, run the app and grant yourself temporary admin rights. If you deploy this to employees with a management system, you can define default reversion to general user. It addresses the need to not allow users to be admins all the time, grants only when the need it for installation.