Exchange 2013 allow users to create/modify distribution groups

How can I restrict them to only be able to modify a specific distribution group and not other groups / objects on the server?

Yes, that also should work, since the scope of the allowed objects the user or group will be allowed to adjust will be custom configured using the RBAC approach. Look at it this way, RBAC would allow to create ANY combination of permissions/groups/functions as needed. Because under the hood it's object to which you assign specific permissions to run specific list of CMDLETS on specific set of objects.
No question, it's a very complex and tedious topic to configure, test and deploy. I haven't seen many companies do this manually. There's a plethora of third party products that were developed specifically for this purpose.

Can you recommend a technical document to do so and a product that we should consider using to do this?

The best document I can think of is the one I posted above.
As for the product I can't specifically recommend, as I didn't work with it long enough. I don't usually do much day-to-day operation support.

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Ronin (https:#a42443302)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer