Can we get role created/assigned which enables some HR personals to modify user names and emails?

Summary:

Can we get role created/assigned which enables some HR personals to modify user names and Primary Emails in the security console without access to assign any role , reset password etc..?

Content (required):

Can we get role created/assigned which enables some HR personals to modify user names and Primary Emails in the security console without access to assign any role , reset password etc..?

Version (include the version you are using, if applicable):

23B

Code Snippet (add any code snippets that support your topic, if applicable):