We've just improved the invite functionality within the Team area of MyMalcolm.
Now when you invite someone to your instance you can set the exact permissions you want them to have - choose custom to be able to drill all the way down to individual permissions.