Is there a way to put a user in the local Windows Administrator group?
There are several ways to do this and no, there isn't a default operator that will do this.
You'll need a user that is admin of your machine
You can, create a vbscript that does this
You can, run a psexec command remotely that does this
You can create a powershell script that does this
You can compile a c++ program that does this
All options you will end up calling the Run Script (either by extending it or directly), and running your code in it.
My two cents is, make the code work outside pam, than adapt it to the run script operator
Hope it helps
Retrieving data ...