Delegate ActiveSync Device Approval

Hi there,

anyone worked out full set of permissions needed to delegate permissions to  Allow/Block quarantined Activesync devices in ECP ?

Went over this thread:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_27427812.html

but this does not seem to work with Exchange 2013 SP1

I'm trying to save time before going over the necessary roles one by one.

The goal is to assign helpdesk (or any other group) the minimal set of  permissions to view quarantined devices and be able to click allow/block without seeing (or being able to modify) anything else in ECP.

Any help is mostly appreciated.

Thanks