Temporary scoped access for outside collaborators. Set expiry dates, control what they see, auto-revoke when done.