Bob only needs to update project schemes in your Jira site.

He should not have too much access or use a license if it is not necessary.

Which product access configuration is correct?