I have   one  case I have   technician team I want to Make the group  for  them    and   i  want to give  them  some  permission, for example, I want to let    them install and remove  app and  driver    and  they  can  join and  disjoint to the domain 

any  advise 

thank you