Adding LocalAdmin group to Administrators group using Microsoft Endpoint Manager for an AutoPilot / Azure AD Joined Devices
Adding Help Desk Admins to local administrator Group
For Elevating the credentials – Use localadmin@domain.com and password member of Help Desk Admins