As long as that user can read the event logs, you should be fine. Also, is there a reason you are using a Heavy Forwarder? There are only really a few cases where you need a Heavy Forwarder as opposed to a Universal Forwarder. That would be if you are filtering a large portion of the data out to save on bandwidth, or if you are using an add-on like DB Connect, AWS Add-on, etc..., that requires a GUI to configure inputs.
Heavy forwarders actually increase the size of your data because the data is "cooked", so unless you are filtering the majority, this is not recommended. Also, with Windows, you could blacklist Event Codes anyway, so this isn't required if that is the reason you are looking at a Heavy Forwarder. I don't recommend filtering out data in the first place because I have seen customers inadvertantly filter out things that they found would have been helpful. You don't know what you don't know.
