1,298 votes250 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
We have released the Authentication administrator and Privileged authentication administrator roles that can manage the authentication methods of the user. If you are using Azure AD Premium, consider enforcing MFA on the user using Conditional Access. We are continuing to work on other roles that will let you manage other MFA settings.
21 votes3 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
The following admins can read bitlocker keys –
Cloud Device Admin
Would it be sufficient to what you are looking for?