Application Elevation is included in your plan — turn it on to get started.
Your subscription entitles this company to Application Control + PAM. Enabling it doesn't enforce anything yet — you pick an operating mode next (start in Audit to watch what would be blocked, with zero user impact).
Ask an administrator to enable it (Settings » Application Elevation).