developer group on a domain

what user group can be used for developers using visual studio .net so that they can have access to IIS and also they can be debug programs but they dont have any domain administrator access.
the active directory is on win 2000 server and the developers are using win xp pro.