How to operate with Win hosts with limited permissions?

Hello!
Id like to know how to use playbooks in combination with Windows clients with for an certain task created user with only the permissions limted to the task?
Id like to create an task reading some userdata from AD and output user logged on the last time longer than 1mo.
I got some tasks, but somehow the more the AWX Server is doing the more unhappy about the administrative access AWX has there is with the collegues.So i get for all Ideas i tell rather ignored:“Yeah were doing this locally” But what for did we get the AWX for - just for some minor suff or real automate all we do manually…
How do you have the more secure thoughts with AWX and the hosts in general - in linux you could put the key in an user profile and limit the user permissions(?).

Thank you for your input again!!

I Found this solution, but there is an missing source of the Grant-Revoke-Query-user-26e259b0 part
I didnt knew you could use openssh in windows too :laughing: