Create new user with just prompt for access permissions

I have a desktop support technician that recently started. Myself and another administator have shared groups for organization. Most users we prompt for confirmaiton but have the ability to hop into the system on demand. I'd like the new user to be able to assist those users but only by prompting for access. Is there a permission set I'm missing that would grant this? 

There are a large number of computers on the network and I definitely don't want to have to maintain two sets of PC data just to make sure he can get in to PCs via confirmation. Any help would be appreciated