Cloud attach vs. cloud only: the debate

We have moved to Endpoint Management exclusively and one issue we have is our printer deployments to our labs which are bulk enrolled so we do not have an admin account on the machines. We tried a policy which looks like a gpo but that didn't work. We use a script that works but it wants an admin account on the devices before the students can add a printer that we have deployed. We talked to an Intune analyst from Microsoft and I asked if there was a command that I can add to the script that would work so we didn't need to add a network account to the device but he didn't know. We only had an issue after the print nightmare issue. Before then we didn't have an issues with deploying the printers to the labs, no admin account was needed.