This information is condensed from Håvard Siegel Haukeberg’s blog over at https://haukeberg.wordpress.com/2016/02/24/disable-pin-code-when-joining-azure-ad/
You need to log in as the actual admin user for the domain, you can’t do this through a partner account with delegated administration.
First up, go to the Azure management portal:
- Go to Active Directory
- Select your Domain
- Select Applications
- Select Microsoft Intune
- Select Configure
- Under manage devices for these users, select All and click Save.
Next, go to Intune
- Go to: Admin > Mobile Device Management > Windows > Passport for Work.
- Select: Deactivate Passport for Work on registered devices