help desk permission to change tag

Hi all,

i need to grant help desk users to change the autopilot devices tag assignement.

Anyone can tell me wich rbac must i assign or how to create a custom role to do this?

Thanks