Intune permissions for help desk

In Intune admin centre, Tenant Administration, Roles; I added an Entra security group Help desk to the roles Policy and Profile manager, Cloud PC Administrator and Endpoint Privilege Manager; but the users still cannot manage Windows devices such as wipe, fresh start or any other function. I do not want to add them to the full Intune Administrator role. Is there something I am missing OR is there a proven custom role anyone has it working?