AMA: Windows LAPS

For reading the the LAPS stored passwords from Intune, will there be an Intune Role Based Access Control that can assigned to administrators in scope tag groups, to support a distributed IT model in a tenant, allowing regional admins to retrieve the passwords just for the devices in their scope? I understand Azure AD administrative units would be one way to handle this, but it would be great if Intune scope tags could offer similar functionality.