My CISO wants no admin rights for end users. Making this setting administrator only will cause many, many calls to our service desk and show some people increased tickets for macOS. Right now, macOS generates few tickets. This would increase that exponentially.