Don't grant Global Admin for this — use a user role instead. Assign (or create) a user role whose data-group permissions include read access to the PIM Salary section, then attach that role to the employee's user account. They'll see the Salary tab without any broader administrative rights.