AdminOnDemand 2.0 released September 9, 2022 - Document updated September 9, 2022
...
Description
AdminOnDemand allows standard enables specified users without local administrator permissions to perform actions with elevated privileges.
Session elevation enables specified users to control system settings and install or remove any application with elevated privileges. Session elevation is less restrictive than process elevation.
Process elevation enables specified users to execute EXE and MSI files with elevated privileges. Process elevation can be used to control exactly which processes users are allowed to execute with elevated privileges.
...
Afterward, you must specify the users and/or groups that are allowed to use session elevation in the “Validation” section.
...
Users and/or groups that are not allowed to start a “Denied” from session elevation can still start a use process elevation through the right-click menu.
The process elevation rules are not effective during session elevation, unless process elevation is used.
To start a session elevation, a user must click on the CapaOne tray icon and click the “Start” button.
...
Process Elevation
When users want to execute a single process with elevated privileges, all they have to do is right-click the process and select “Run as AdminOnDemand”
...