Cannot be done.
Without the passcode or touch id, you cannot get to the phone's data which is encrypted.
The only thing they can do is reset his icloud password and get into his icloud data, mail, contacts, calendars, some photos, notes, but no text messages and no third party apps and their data.