Changes to API for multiple networks

I’m using my WPMU Dev API key on two networks that I manage: one for myself and one for a client. On my client’s network, they granted one of their employees super admin use and added permissions to view/use the WPMU Dev dashboard. Is there a way to restrict the activity of that user to only download plugins and themes and disable posting questions (subsequently, on our behalf)? Or can a secondary email/API key be set for use on that network with a limited feature set?