You could install another instance of SQL Server for their app and give them admin/sa rights to that database instance.

That keeps them out of your main database(s) while giving them...

Often times the OEM version is used by people that build computers and has some restrictions. For example it can be installed on the original machine but can't be...