AMA: Windows LAPS

Since creating a new admin account is what was recommended, what's a clean way to create admin account via Intune? To add more context, our environment is azure-ad joined and machines are built with only a standard user account with built-in admin account disabled. I would like to bring LAPS so that there's a local admin account on these machines.