Cisco ASA Privilege Levels

[dibthree]

I opened a TAC case but since it is level 3 I thought I would post and see if I could solve it here faster

Issue:
I have two help desk users that I would like to give access to the ASA with limited rights.

I would like them to be able to reset user passwords in the ASA local AAA User Accounts but not be able to change anything else.

Is there a Privilege level that would accomplish this or could I create/edit a custom one?