local admin access

How do you handle local admin access for developers?

We’re tightening permissions as our organization grows, and some developers may lose standing local admin rights. What approaches let people do their work without leaving admin access open…