How do I control access and privileges?

I have an organization that has internal tech writers and management who write, edit and approve manuals. We also have a group of customers and partners who need to have access to these manuals and possibly comment on them. How do i set this up?