I agree, they will have view only access to any production objects.

It has been difficult finding the right balance to allow development and debugging without giving too much permission. Thank you for responding!

kay