855 votes177 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
This feature is now on the roadmap. The MFA team is planning to adjust admin roles or create a new role that will allow delegation of MFA registration and credentials to an admin role.
20 votes2 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
The following admins can read bitlocker keys –
Cloud Device Admin
Would it be sufficient to what you are looking for?