@Jarvis Deveson Thanks for posting in our Q&A.
If a device has a primary user, it means that this device is not a shared device. So, it will not allow a second user to access.
Could you please tell us why IT want to access company portal apps in staff computers? Based on my experience, IT can access Intune portal to manage devices, manage apps or monitor something.
Hope it will clarify something.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.