https://www.petervanderwoude.nl/post/intune-role-based-administration-control-and-devices/