The new advance management plan (coming March 2023) has a very important feature, Endpoint Privilege Management. If this works, it’s huge as something we have been asking since Windows XP. Currently many organizations utilize 3rd party like CyberArk and BeyondTrust to control local admin processes while taking local admin away from a user.  This will be an add-on SKU I believe to what you may own in E3 or E5 today.

Reduce your overall TCO with a new Microsoft Intune plan – Microsoft Community Hub