Might have to switch from Mosyle

Hi all, currently using Mosyle to manage 65ish Macs, due to merging with other orgs, it's looking like Intune might be the preferred MDM. Anyone know if using Intune for ADE is limited to having the user create their own user account with admin privileges? Mosyle lets me create an admin account and a Standard user account. SOC2 compliance is now required and having a user account with admin rights won't fly.