Is there a way to allow specific permissions to a non-root user?

I have a program that, at some point, create/destroys tun/tap virtual adapters.

Obviously, for these specific operations this program requires root privileges.

According to the program specifications, root privileges are dropped as soon as they are no longer needed (I assume after the tap adapter was created).

However, I'd like to secure this even more and to run it as non-root in the first place.

Is there a way of allowing a specific user to just create and destroy tun/tap adapters and leave out all other specific permissions to their default ?