A Site is an enrolled environment you already operate. Collaborators get access to the Sites you assign — least privilege for external developers and contractors.
Define Sites as the unit of access
Assign people to only the Sites required for the work
Separate client or project environments clearly
Revoke per collaborator without tearing down Sites