Hi burmzorz,
It sounds like you are referring to the users ability to perform these functions on their "Workstations", if this is correct they would need to be added to the "Power users" or local "Administrators" group to perform these said functions.