how to allow a user access to our server event logs?

[Kremlar]

We want to setup a user on our domain with access to our Windows Server 2003
event logs, specifically the security log.

What is the minimum requried for him to access this? Does he need to RDP in
as a domain admin, or is there some other way to access this log?

Thanks!