Viewer access to firewall administration.

Hi,

I have a junior, that I would like him to learn more about our firewalls and how they work, along with letting him get dianostic information from them.

I am reluctant at this time to grant him full administrative rights over the firewalls as if he altered something, I would stress out.

With the procurve switches we use, I have given him the viewer logon details so can look at everything, but he doesnt have the manager logons to actually change anything.

Is it possible to do the same with XG's?

Thanks,
Richard.