Can we restrict a role to just reset other users passwords?

We just need a particular role which can be assigned to a IT help desk so they can only reset other users' passwords. The role doesn't need any other security features like adding/changing roles,etc.