AD Users - What Member to use in order to add users on a Domain

Hello,

Here's the senario: I have a PDC which is locked down to only a few user with direct access via the admin account. I would like a user be able to login into another server that is on the same domain and be able to use "Active Directory Users and Computers" from the AD Domain and Trusts tools and be able to add a new user or reset passwords.

What Member does she need to be assigned? Of course I do not want any Admin group assigned, other the user would be able to log into the PDC.

Thanks!

Jason