The following functions should be added to the Delegated Administrator group for its franchise users:

Unlock users, which is a function that allows delegated administrators to unlock users who have been locked out due to incorrect login attempts or password expiration.

Assign or remove permission sets for users in their delegated groups, which is a function that allows delegated administrators to grant or revoke additional permissions for users in their delegated groups by using permission sets.

Create and manage membership of specified public groups, which is a function that allows delegated administrators to create public groups for sharing purposes and add or remove users from those groups.