Feature 21955 - Manage the local administrators on Microsoft Entra joined devices

[praneeth-0000]

Rewrote the assessment logic as per new spec

• Pass Scenario

• Fail Scenario

Closes #678

[alexandair]

@merill @ramical
If I understand the article in Remediation action section correctly, it's recommended to use Intune method and leave the tenant-wide role empty.

You can use Microsoft Entra groups to manage administrator privileges on Microsoft Entra joined devices with the Local Users and Groups mobile device management (MDM) policy. This policy allows you to assign individual users or Microsoft Entra groups to the local administrators group on a Microsoft Entra joined device, providing you with the granularity to configure distinct administrators for different groups of devices.
Organizations can use Intune to manage these policies using Custom OMA-URI Settings or Account protection policy.

The current test fails organizations that implemented this recommendation.

[alexandair]

Left the comment for @merill and @ramical to confirm if the spec is correct.