CUCM role that only allows user password resets

I am just a network technician but work a lot with users and phones. Our phone guy says there isn't a way to set up a role within CUCM so our HelpDesk can only do password resets. Just curious if anyone out there knows of a way. Thanks.