NWA access - role assigment

All,

I have a need to provide one of our developers NWA Admin rights, but every combination of Role / Group I've tried gives him Admin rights to the UME as well. Does anyone know what the appropriate role I could use to give him NWA access, if I could restrict it to Operation & Configuration Management, that would be ideal.

Thanks in advance,

Jose