We've just improved the invite functionality within the Team area of MyMalcolm.

Now when you invite someone to your instance you can set the exact permissions you want them to have - choose custom to be able to drill all the way down to individual permissions.