AMA: Windows Autopilot

Welcome back ChrisWilliams  and thank you again for the question. There are no specific capabilities within Autopilot or AAD for this, however, we've continued to iterate on the built-in CSP for managing local admin permissions on managed devices. Here's a fabulous blog (non-Microsoft but written by a excellent Microsoft resource): Managing Local Administrators with Azure AD and Intune – Jeff Gilbert's Cloud. Please let me know if this doesn't fully address your challenge(s) though.