Permissions for Teams Phone Management

Hello.

Our organization is looking to cut back on the number of users who have the Intune Administrator RBAC role, and in looking for solutions, I have an issue.  I want to create a custom RBAC role called "Phones Admin" which will have the ability to enroll and manage Teams phone devices.  However, I'm trying to decipher what permissions this kind of role would need, if it is possible.  Has anyone done something like this, and if so, how did you configure the custom role?