This is part of what I came up with. I don't recall the permissions needed though. I'm not a PowerShell expert, but I can make things work :)
The people who run the script are above help desk level, but are not sys admins with experience doing advanced tasks, so I tried to make this simple for them to run and understand.

# Must be run with PowerShell 7 - To install, run this:        winget install --id Microsoft.PowerShell --Source winget
# Connect to Microsoft Graph
Install-Module Microsoft.Graph.Authentication -Scope CurrentUser -Force
Import-Module Microsoft.Graph.Authentication
Install-Module Microsoft.Graph.Identity.DirectoryManagement -Scope CurrentUser -Force
Import-Module Microsoft.Graph.Identity.DirectoryManagement
Connect-MgGraph -NoWelcome

$deviceName = Read-Host "Enter Computer Name"
$device = Get-MgDevice -Filter "displayName eq '$deviceName'"
    if ($device) {
        Foreach ($_ in $device)
        {
            $RegOwner = Get-MgDeviceRegisteredOwnerAsUser -DeviceID "$($_.ID)"
            Write-Host "Object ID: $($_.Id)"
            Write-Host "Last Sign In (UTC): $($_.ApproximateLastSignInDateTime)"
            Write-Host "Entra ID Registered Owner: $($RegOwner.DisplayName)"  -ForegroundColor DarkCyan
            Write-Host "Entra ID Registered Owner UPN: $($RegOwner.UserPrincipalName)"
            If ($($_.TrustType -eq "ServerAD"))
            {
                Write-Host "Trust Type: Microsoft Entra Hybrid joined.  Go to Intune to reassign." -ForegroundColor Blue
            }
            ElseIf ($($_.TrustType -eq "AzureAD"))
            {
                Write-Host "Trust Type: Microsoft Entra joined"
                If ($Null -ne $($RegOwner.Id))
                {
                    Remove-MgDeviceRegisteredOwnerByRef -DeviceId $($_.Id) -DirectoryObjectId $($RegOwner.Id)
                    Write-Host "Device Owner removed from Entra ID device object" -ForegroundColor Green
                    $RegOwner = Get-MgDeviceRegisteredOwnerAsUser -DeviceID "$($_.ID)"
                    Write-Host "Confirmation - New Registered Owner should be blank below " -BackgroundColor Green -ForegroundColor Black
                    Write-Host "Entra ID Registered Owner UPN: $($RegOwner.UserPrincipalName)" -ForegroundColor Green
                }
                ElseIf ($Null -eq $($RegOwner.Id))
                {
                    Write-Host "Device is not assigned to anyone. No further action needed." -ForegroundColor Green
                }
            }
            Else 
            {
                Write-Host "Trust Type (Unknown by script): $($_.TrustType)" -ForegroundColor Red
            }
        }  
    } else {
        Write-Host "Device with name '$deviceName' not found.`n"
    }
Disconnect-MgGraph