How to restrict admin access of all the users within an organisation

Hi everyone,

In my organization, all employees log in using their Microsoft email IDs, formatted as user.name@domain.com. Currently, all users have administrative access to applications such as PowerShell, Command Prompt, etc. I want to restrict this administrative access so that users must submit a request on the Azure portal to gain admin privileges. Once an admin approves the request, the user should receive admin access for a limited time.

I've searched various resources online but haven't found a comprehensive solution, and I've encountered numerous difficulties along the way. Could someone provide a detailed guide or set of steps to achieve this?

Thanks in advance!