You need to give him the “enable secret” password. He would then log in with his normal username and password. Then all he has to do is type “enable” and he will be prompted for the enable password. He will have full access then. I would also suggest enabling SSH to connect as everything is encrypted and not clear text through the network.