With Azure AD Premium, you can choose which users are granted sign-in rights to the device. NOTE, the device owner is always ...