Is there anyway to have the SEP agent run a script or program as elevated or as admin?
There is not. This is outside of the scope of SEP. SCCM or Altiris eould be two examples of products that can do this.
SEP runs all the actions using SYSTEM account, do you need anything more than that?
It's not possible to have the SEP agent run a script or program as elevated or as admin