Balancing Security and Software Access: Addressing user needs without granting Local Admin

We refrain from granting local admin permissions to our users; however, there are instances where some users require local admin access for basic usage, such as running 1-2 specific software applications. How can we effectively address these cases without directly assigning local admin rights while still ensuring the ability to run the necessary software?

Do you know any native security controls security software or best practices?

access address admin admin rights applications balancing security basic can cases cybersecurity effectively local local admin rights permissions rights running security software software applications