DLP use cases to monitor privileged access employees who can transfer files form internal to external network?

[k115]

I need to monitor privileged access employees who can transfer files form internal to external network. Prvileged access employees include local admins, unlimited internet access users, employees who can use usb flash drive and send emails to external

I need it it from DLP , please guys, help me how to do it with splunk.