Generally speaking, you just want a single privileged account and not one for each person unless you have a password rotation workflow sorted out. Basically you are giving malicious actors multiple attack vectors for seldomly used accounts that have elevated access.
However, creating the accounts is simple. Create a Policy, add the Local Account payload, fill in the details, scope it out and deploy. Repeats this for each account you want to create. If you specify a home directory, macOS may not make one until after the user logs in (I have not verified this as I always specify the home directory).
