Is there a way to assign a helpdesk technician the ability to enable and disable users.  

I see where they can delete the user, however this is not how we do it.  The user needs to be disabled.