They would need the rights typically granted through the PM or
Administrator's group as well as access to the project in question granted
through category association. There's not a single switch that you throw in
order to do this. It's a combination of Group and Category that grants the
rights.
