You can give them access to the management console just for their own extension and from there they can configure voicemail delivery, call routing, BLFs, etc for their extension only.
But you also open up the possibility for them to screw other stuff up...
This need, as well as the user changing their mobile number, should both be available in the softphone(s) so they do not need to remember yet another login.