I'd say they need access to the entire sites/db, you need to trust your dev guys, if you cant then find another company! (such as the ones recommended by the ADNSF site/admins).