I want to delegate the task of assigning applications to workstation objects to our user help desk. I was not able to determine which attribute rights on the application or on the workstation objects are needed for this task without giving more rights than necessary.

Any help would be appreciated.