[j-nsp] Logical router access only?

[nachocheeze at gmail.com]

Is it possible to allow a specific user under JunOS to have full
super-user access to ONLY one (or more) logical routers, but not to
the default actual router?

Say I've got a logical router built that is acting a a PE device only,
and want some other folks to be able to make changes (adding BGP
neighbors, etc) to the config under this specific logical router, but
do not want them to have any access, or read-only access, to the main
router that's acting as a P/PE device or various other logical P/PE
routers.  Is this scenario possible?