A company wants to grant Partner Community users access to custom object records using criteria-based sharing rules. Which license type supports this and what are the restrictions?