User needs access to specific group

Domain is NT 4.0 with Win2000 member servers. I have a developer with one server set up for apps he is working on with a logon that has administrative privileges to that box only. I have created some global groups for him on the domain to use for one of his apps. He has requested the ability to at least view the members of his groups and to maybe also modify them. How can I give him a read only view of domain user groups, and possibly give him administrative rights to his groups only?