Create a group / allows full IIS Control

I need to create a group that has access to IIS and Web Functionality on the server, But the rights should not allow users in the group to change system config, such as networking properties, swap file, log on info and such. The user rights for the group should only allow users to change IIS Config. Is this Possible….Thanks alot