minimum permissions to grant / delete logins

I'm creating an admin tool for the app I'm working on and I want to be
able to grant the business admin user the ability to create logins,
and delete logins; >>but only allow them to delete the login if the
user only has permissions to the database for my app<<.

What are the minimum permissions I need to grant to the business admin
user for this?

Thanks!
.