your requirement can be achieved by creating special Management Role (RBAC) with only permission related to the photo update and assign that role to the required users or group. Following steps will help
Create a new Management Role and set the required permissions to the role through PowerShell (Connect Exchange Online PowerShell using the authorized account - connect-exchangeonline
After connecting the account, you can create the Management role by using the following command
New-ManagementRole -Name "PictureUpload" -Description "Allows uploading user pictures" -Parent "User Options"
The new role should be fine tuned so that, the role allows only picture related permissions. This can be achieved by running the following command. The command basically removes all permissions except the picture update permissiond
Get-ManagementRoleEntry "PictureUpload\*" | where {$_.Name -Notlike '*photo*'} | foreach {Remove-ManagementRoleEntry -Identity "$($_.id)\$($_.name)" -Confirm:$false}
Now, the new mnagement role is ready to be assigned to the required user or group. For this, connect the exchange online admin center and create a new role
'Roles' section will have the new role created as below
Select the required members and assign the required permission so that they will have the picture edit permissions in the organization
----------
--please don't forget to upvote
and Accept as answer
if the reply is helpful--