Use Privileged Access Manager (PAM) to manage just-in-time temporary privilege elevation for select principals, and view audit logs to find out who had access to what and when.