Permissions for specific VMS for third party access

I am looking to grant permissions to a third party we currently have in working on their virtual machines within out environment, I wanted to if possible give them access to ONLY their machines.
Is there a way of doing this? They do have a third party AD account which they are using on our domain.