When you create an Access Level, you can select the Request license type, then select what they have access to within that license type's access. Here's a screenshot of one Access Level we have with the Request license.
We've limited them to NO access to projects, tasks, portfolio, and reports. They can create an issue through a request queue and add documents. Further within the issue and documents settings icons, we've limited them to be able to create and share both, but not delete
Looks like we've given them access to create filters, views, and groupings -- but no access to those things you could add a filter, view, or grouping onto - so that one probably doesn't matter.
Scrolling down, outside of my screenshot, we've given them NO access to most everything else. We did give them access to View Users, but then within the settings icon on that button we have not given them access to see contact information for any users.
