You can change user's role in order to ensure they have specific rights only in a given Workspace. You can either assign a role when you invite new users, or change this once they have already accepted your invitation.

You can find the dedicated option to change roles in the settings of your workspace. Click on Users & Teams, and you will then have access to the entire user list.

More information about the roles available and the set of permissions assigned to them are available here.