Intunes Roles - Scoping?

Hey all,

I am looking to assign a role to the team member that manages day to day functionality in Intune for our iOS and Android devices that are enrolled.

I can assign the role to the group - but my question comes down to scope. I want this person to be able to perform this functionality on all of the devices that are enrolled. What is the best way to accomplish this?