Privileged access practices to align with Essential 8

Hi All, 

We are trying to implement Essential 8 L2 components in our environment. I'm looking for some guidance on how to achieve the following items using our existing tool sets (Defender, Intune, ADP2 etc..)

• a Jump server to comply with the Essential 8 security standards (Administrative activities are conducted through jump servers)
• Privileged operating environments are not virtualised within unprivileged operating environments.
• Privileged accounts (excluding privileged service accounts) are prevented from accessing the internet, email and web services.

Any guidance or recommendations to configure these items are highly appreciated ! Thank you All !