What you control
who has access, for how long, which regions, which categories

Contractors
You need to give an external person web access for a project — but issuing a VPN, imaging a device or opening network access is too much for a short engagement.
who has access, for how long, which regions, which categories
Their personal apps, files and the rest of their device stay outside the proxy path.
Proof points
Related use cases