external users access to sharepoint with no downloading, printing or copy/paste

I know this is possible and I should be able to figure it out on my own....... but I have run out of time. I want to send invitations to external users with a custom greeting (I am using New-AzureADMSInvitation and this bit works). What I am struggling with is how to set the permissions properly to prevent download, printing etc