Run as admin on intune devices - role

Hi all,   What role can I give a user if we want to allow them to be able to run as admin on intune managed devices without giving global admin?