I'd specifically like them to be able to use the Network Manager.
Here's one way to do it by narrowing the scope of sudo users and commands.
Create a new sudoers file by any name:
Add the contents of the file (with real usernames and any real additional commands of course)...
Save & quit. Now the named users can open a terminal to change settings, using their own password:
Some notes: It is critical that you use
you could temporarily wind up without administrative access.