Cisco Access-list question

[SuPaStA]

Need help with what I need to allow on a access list.....

We have some external users working on a project but they are not allowed access to our internal network.

I have created a access list and applied it on a layer 3 vlan inbound/outbound.Which allows them internet access/VPN access and the only internal access is to the DHCP server for a ip address.

Now I would like them to access an internal printer, but I dont want them to have full access to the IP of the printer.They should only be allowed to add printer/print.

Will post the access-list if needed....

 

[syntax]

why dont u want them to have access to the printers ip?
They are going to have to have some kind of access to it, i suppose you could limit the services/ports that they can access on that ip