Enable Windows standard users with Endpoint Privilege Management in Microsoft Intune

I would like to see the "need" for local administrator access eliminated. I have never needed root access to my phone.

Through simplifying our configurations and attempting to manage everything through Intune (and the Company Portal), we have come close. Reaching the limits of this policy, we would like to give a group of people local administrator rights to a group of "less managed" devices. Can EPM be used in this way?

At the moment, it is looks like we may have to assign traditional local administrator rights through an Account Protection policy to the group of PCs for our group of admins. Then, if we want EPM's reporting, and don't mind the price, we can assign a "deny all" Elevation Policy.