You can look up documentation on the clearpass technote page. There is info for Microsoft Intune there which provides config examples.
https://arubanetworking.hpe.com/techdocs/ArubaDocPortal/content/cp-resources/cp-tech-notes.htm
We are actually going away from Cloud PKI with microsoft and going back to Clearpass Onboard with SCEP enrollment via Intune. There are a number of cloud PKI vendors that can be used. There is a ton of documentation out there on the topic already. If the concepts are not understood I would suggest getting help from a VAR on this topic.