How to grant permissions to a regular user, so they can get access to Swan collections and log off remote users ?

Hi

We have Windows 2012 STD R2 set up as terminal server and hosting an accounts application.

Everyone is connecting to the server via RDP.

Is it possible to give enough access to a regular user, so they can see only the Remote Desktop Services tab in Server Manager ? One of the users need to be able to disconnect/log off other users from the terminal server.

Not quite sure what permissions to assign in AD. Obviously I do not want to expose too much of the server to a user.

Your suggestions are much appreciated.

Thank you.