OIM Access (R11)/ Security Console Access (R12) for Password Resets Only

Summary

Certain Business Areas have the need to reset Passwords and not have access to Add Roles.

Content

Apologies if this isn't in the right place,

We currently use the role of IT Security Manager for specific areas of the business that require access to user accounts,  password resets and managing Roles. Is there a simple way of enabling certain users to have access to Password Resets only?

...If we were to create a Role specifically for Password Resets, Depending on if we can isolate the name of the duty or policy needed, is there a chance this could affect other areas of Security Console moving forward, especially with the possible upcoming changes to predefined roles in Release 12.