Azure Joined Devices - Permission

Hi,   We are in the process of Azure Joining our company issued laptops. How can I set up permissions to the laptop users to not be able to make changes to the devices without an Administrator?   ...