The only permissions he needs are the Manage permissions for the ADS and the instance you want him to access.
All the other permissions you give inside the MC instance itself.
https://discourse.cubecoders.com/t/managing-user-permissions-in-amp/2301
In terms of resources, you’d make sure to not give him the memory settings under Java and Memory
1 Like