This is not possible without some sort of automation for them to request it, and then you process it on your side. There is only one type of user at System Administrator level, so they would have all access to all feature/resources at the System level.
Since I would assume you don't want to hand over an entire environment, I'd suggest looking into something like vCenter Orchestrator and a basic request web portal to get this accomplished.
