Specifically, I need to give a service desk employee access to rename
user accounts. Does anyone know what rights I need to setup for her?