What are the Best practices for setting up security groups in Grid for adding Targets

My DBA's cannot add targets to a group without FULL privilege on the target being added. Thus I am stuck granting super administrator to everyone otherwise I will need a separate group responsible just for adding targets and assigning the groups. Is there any documentations or White Papers on best practices for setting up security groups to allow for adding new targets to a group?