Jamf Nation Community

Hey Jamf team, I'm a bit new to Jamf administration, could use a little help. To meet an audit requirement I need to create an alert for any installs by users that required privilege escalation. How would I go about do that with out jamfpro?