Is it possible to give a user or group rights to a snapshot without giving them rights to the database if the database and snapshot both reside on the same instance?
From Limitations and Requirements of Database Snapshots on TechNet:
A database snapshot inherits the security constraints of its source database at the time of snapshot creation. Because snapshots are read-only, inherited permissions cannot be changed and permission changes made to the source will not be reflected in existing snapshots.
As Martin Smith suggested in a comment, one way is to grant permissions on database, take a snapshot, and then remove permissions. The login could be temporarily disabled for the period that rights were granted.