which admin role can change photo for user?

I run this command to stop users from changing their photos.

Set-OwaMailboxPolicy -Identity OwaMailboxPolicy-Default -SetPhotoEnabled $false

Now, i need to allow members from HR to change photos on behalf of the users.

IN ecp, there are a few admin roles :

help desk, recipient management, organization management.

which role will allow them to perform their jobs?

As an administrator myself, i can login in as another user to do that. but i dont want to give HR admin roles

Any tips?