I aggree give them only the access they need. With the least amount of privileges needed to do what they were contracted for.