Rule (or role) for only changing contact data in Univention Web


as the contact data of our users are pretty outdated, one collegue should be able to change this data, but not other data like permissions or add new users and so on.
Is this possible somehow?
Thanks in advance and best regards,