Impersonation

Exchange 2013, have a 3rd party application that needs to use a service account to  use impersonation. I also want to use a security AD group to give users access to this. Is there a step by step guide for this type of setup?

Thanks

Pat