What is required to grant external users access?

If customers or partners are to be given access to the solution, different rules apply than for employees.

The license is different

External users are not covered by standard user licenses. Separate licensing models are available based on usage rather than per named user. This has a significant impact on the cost of the solution and should be clarified before anything is built.

The scope must be defined technically

Hiding fields in the interface is not enough. External users must not be able to access data they are not authorized to see, regardless of how they access the system. This is handled in the security model, not in the form configuration.

Consider the identity

Will they sign in with their own work account, a separate user account you create, or an authentication service? The choice affects both security and the amount of administration required.