Privilege Manager

Our Security team requires that the reporting show what file and path to the file is being elevated, along with the reason for elevating it.

I would like to specify rules to control who, what and where actions can be elevated to run with admin privileges