Selecting security group for 3rd party remote access

Hi

I'm trying to set up a user for a 3rd party company as they need to install and configure their software remotely.  I've had a look through the default groups but am unsure which is the best to use - I want them to be able to install their software but not change anything in AD.  They should also be able to create folders and set the security.

Is there a group already for this purpose?

Thanks for your help