I would like to give access to my Sites to an outside, freelance developer for 3 months, but not access to my CRM.  How do I do that?  Do I need to create an additional user ID for them?  How do I restrict that user ID to only Sites and Social?