You have a Microsoft 365 E5 subscription that uses Microsoft Intune Suite and contains 500 devices that are either hybrid joined or Microsoft Entra joined.

You plan to deploy Endpoint Privilege Management (EPM).

You need to ensure that users can only run apps as an administrator when they meet the following requirements:

• The users are approved by a member of your company ' s IT department.

• The users are signed in to a device that is only Microsoft Entra joined.

The solution must minimize administrative effort.

Which policy should you create, and to what should you assign the policy? To answer, select the appropriate options in the answer