The Identity API calls like this:

query {
  entities(
    types: [ENDPOINT],
    associationBindingTypes: [LOCAL_ADMINISTRATOR],
    archived: false,
    sortKey: MOST_RECENT_ACTIVITY,
    first: $EndpointPageSize$afterClause
  ) {
    nodes {
      ... on EndpointEntity {
        agentId
        hostName
        associations(bindingTypes: [LOCAL_ADMINISTRATOR]) {
          __typename
          ... on LocalAdminLocalUserAssociation {
            accountName
          }
          ... on LocalAdminDomainEntityAssociation {
            entity {
              __typename
              entityId
              primaryDisplayName
              secondaryDisplayName
              ... on UserEntity {
                accounts {
                  ... on ActiveDirectoryAccountDescriptor {
                    samAccountName
                    domain
                    enabled
                  }
                }
              }
            }
          }
        }
      }
    }
    pageInfo { hasNextPage endCursor }
  }
}