If you're assigned the User administrator role, you can invite visiting users from outside your work group or company (for example, partners). You can then add them to workspaces, and assign them roles in your tenant.

You can also remove unnecessary visiting user accounts from your tenant.