When creating an account in Jamf Pro, you can set specific privileges the user has. One of the checkboxes is called "Send Computer Remote Lock Command", under the Jamf Pro Server Actions section. I'm not sure, but I would think at a minimum the account would also need to be able to Read and possibly Edit computer objects too. Not sure on the latter, but fairly certain they would at least need read privileges so they can pull up a machine to get to the Management tab.
