To create, edit, and delete isolation groups, you need the following role:
scheduler-isolation-administrator
A user with this privilege is allowed no further privileges.