Restrict User Access to Certain Folders or Programs

We are working with an outside vendor that is creating some emails and email templates for us.  Is there a way to set them up as a user but somehow restrict there access to only certain folders/programs where they would be able to upload emails?

If you do work with outside vendors/agencies/designers, how do you handle their access to your instance?

Thanks,

Tim