Adding the users to the NetworkOperators group should do the trick,
AFAIK. However, manipulating routes is an administrative task, so I
strongly recommend against allowing normal users to meddle with this.
To the original poster... help us understand why your users need to
manipulate the routing table. Perhaps there are other solutions to whatever
it is you need to do.