Azure AD Roles

Hello, JawanL 

Azure has Role-Based Access Control (RBAC) for scope-based device management like Intune Administration, Application ADministration, etc. You can use Built-in roles or create your customized RBAC role according to your needs. You need an Administrator group under a role that will have assigned privileges for the target scope and device groups. I have been using different Intune roles at the District level and Campus level for our Distributed network with RBAC for a long time for my different Districts and School Campuses.

To use RBAC, you need a license of at least P1 level.

https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-overview

You can also use Administrative Units for user account management such as help desk, password, authentication methods, etc. You can assign administrators for specific roles and lists of target users or groups under Administrative Units.