I actually made the default per-user, specifically for cases like this. With a default install that the current user has done, pip does not need to be run as admin.

If the system administrator has installed Python for all users, then --user needs to be specified to run without admin. (Could the admin add config to pip for all users to make this the default? I know we discussed it - don't remember what the result was.)