Your clients business requires that only requester A is provided access to the punchout catalog and not requester B. Identify the configuration to achieve this.