I know that the security_admin rule is an elevated role. Is there a way to create a new role, called 'sudo_admin' for example, that is an elevated role equivalent to the admin role? I don't want people to be admins all the time, only when they need to, but I also don't want them to use a different user id for there admin work (first.last versus admin_first.last) for example.
I know you don't want to take the existing admin role and just make that an elevated role as that can break things.
Or is the better approach to use the newer time-bound role catalog item for temp addition of admin role to user?
