Create Group with Some Admin Functions

How do I create a group for my technicians with some adminstrative functions but not all. For instance, they can create user accounts but can’t add workstations to the domain…