@Evol12-5109 Thanks for posting in our Q&A.
1.Please read this article:
https://learn.microsoft.com/en-us/mem/intune/protect/derived-credentials
2.Did you want to add users to the local administrator group? If yes, please refer to the following article:
If there is anything misunderstanding, please correct me.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.