Elevation rules that target specific users — not just machines — so a single endpoint can have different elevation behavior per user.