For technical users with access to a computer, we already have granular access via delegated, constrained PowerShell runspaces, PowerShell Web Access, and custom PowerShell functions.

Learn how to configure Controlled Folder Access intrusion-prevention feature, using Group Policy & PowerShell in Windows 11/10.