You create a canvas app that allows contractors to submit time they work against a project.

Contractors must be able to use the canvas app to enter time. Contractors must not be able to perform any other actions in the app.

You need to configure permissions for the contractors.

Which type of permissions should you use?