Whether powershell can be used to add and delete administrator rights for domain users on the AD domain server

May I ask if there are some specific operation steps, I don't quite understand, thank you

I don't have a test environment here to give you specific steps. Such as GPO setting and delivery, these need to have a specific environment can be configured. If you use the domain environment, you should have the authorization to purchase Microsoft. You can make a case to Microsoft and ask TAC for assistance. Thanks!

Active Directory group management is closely related to user management. You can use the cmdlet of the Windows PowerShell Active Directory module to create and delete groups and modify group properties. These CmDlets can also be used to change group membership.
You can issue a group to the domain computer through the GPO as the admin group of the computer.
To temporarily add admin permissions to a user, add the user to this group. When cancellation is required, the user is removed from the group.

New-ADGroup -Name ApplicationAdmins -GroupScope Global 

* - ADPrincipalGroupMembership add user account for the group members.

This link has requirements similar to yours, you can refer to: < span > https://www.likecs.com/ask-10218495.html < / span > < / a > < br / > if the above are helpful to you, hope to adopt. Thanks!