SNMP OID ACL possible?

I have a client that recently started using a cloud hosted LOB application with an IPSEC Site 2 Site tunnel.  The  vender wants to be able to connect via SNMP to monitor the interface for any performance or connection issues.

I am not familiar with SNMP on Fortigates but I am concerned about giving too much information.  I don't want them accessing sensitive system/policy OIDs...

The SNMPv3 standard does have provisions for OID user permission (ACL) I think?  Does FortiGate support any of this?  I know it is not exposed in the GUI.

Am I being too paranoid?

Thanks,