Allowing delegated group membership management in BI Platform

We wish to allow our users to have shared folders in our BI Platform (Business Objects) System with their organization units/departments. The purpose is to allow them to share custom reports with their colleagues. Creating the folders and groups is easy. But the management or group membership will be problematic in our organization. We wish to designate group managers who will be able to manage the group membership themselves. How can we safely allow them to manage group membership while preventing them from accidentally altering the system environment and configuration. We need some reassurance we can safely allow them access to the CMC to manage their groups.

We are using BI Platform 4.2 SP6.